Milesight vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-29988 A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions High 8.3 · Aug 26, 2026
• CVE-2026-32649 A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras.High 7.3 · Apr 27, 2026
• CVE-2026-32644 Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys.Critical 9.2 · Apr 27, 2026
• CVE-2026-20766 An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras.High 8.6 · Apr 27, 2026
• CVE-2026-27785 Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials.High 7.7 · Apr 27, 2026
• CVE-2026-28747 A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras allows authorization to be bypassed.High 7.3 · Apr 27, 2026
• CVE-2024-36391 MileSight DeviceHub - CWE-320: Key Management Errors may allow Authentication Bypass and Man-In-The-Middle TrafficCritical 9.1 · Jun 2, 2024
• CVE-2024-36390 MileSight DeviceHub - CWE-20 Improper Input Validation may allow Denial of ServiceHigh 7.5 · Jun 2, 2024
• CVE-2024-36389 MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values may allow Authentication BypassCritical 9.8 · Jun 2, 2024
• CVE-2024-36388 MileSight DeviceHub - CWE-305 Missing Authentication for Critical FunctionCritical 10 · Jun 2, 2024
• CVE-2024-27776 MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') may allow Unauthenticated RCECritical 9.8 · Jun 2, 2024
• CVE-2023-47166 A firmware update vulnerability exists in the luci2-io file-import functionality of Milesight UR32L v32.3.0.7-r2.High 8.8 · May 1, 2024
• CVE-2023-43261 An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components.High 7.5 · Oct 4, 2023
• CVE-2023-25583 Two OS command injection vulnerabilities exist in the zebra vlan_name functionality of Milesight UR32L v32.3.0.5.High 7.2 · Jul 6, 2023
• CVE-2023-25582 Two OS command injection vulnerabilities exist in the zebra vlan_name functionality of Milesight UR32L v32.3.0.5.High 7.2 · Jul 6, 2023
• CVE-2023-25124 Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.High 7.2 · Jul 6, 2023
• CVE-2023-25123 Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.High 7.2 · Jul 6, 2023
• CVE-2023-25122 Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.High 7.2 · Jul 6, 2023
• CVE-2023-25121 Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.High 7.2 · Jul 6, 2023
• CVE-2023-25120 Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.High 7.2 · Jul 6, 2023
• CVE-2023-25119 Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.High 7.2 · Jul 6, 2023
• CVE-2023-25118 Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.High 7.2 · Jul 6, 2023
• CVE-2023-25117 Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.High 7.2 · Jul 6, 2023
• CVE-2023-25116 Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.High 7.2 · Jul 6, 2023
• CVE-2023-25115 Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern.High 7.2 · Jul 6, 2023