CVE-2026-79396

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-11 · updated 2026-09-22
Weakness: CWE-798

Description

Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing remote attackers to gain full administrative control over the camera.

References

https://github.com/ShiroiBoushi/vulnerability-research/tree/main/CVE-2026-79396
https://github.com/ShiroiBoushi/vulnerability-research/tree/main/CVE-2026-79396

Get alerted when CVE-2026-79396 or the next vulnerability affects your stack