Vulnerability intelligence

CVE-2026-5386

The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password reset. This flaw allows an attacker to remotely reset the administrator password to a known value without authentication, granting full access to the camera feeds and settings.

CVSS Score

9.1

Critical

EPSS — Exploit Probability

0.6%

Riskier than 48% of all CVEs · checked 2026-09-09

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

1 article across 1 outlet · first covered Jun 2, 2026 · latest Jun 2, 2026

Coverage timeline

CVE-2026-5386 flaw in KMW CCTV lets hackers take over feeds
securityonline.info · Jun 2, 2026