9.1 CriticalCWE-620
CVE-2026-5386
KMW KM-IP521 vulnerability
KMWKM-IP521
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.6%probability of exploitation in the next 30 days
Higher than 50% of scored CVEs
SeverityCVSS
9.1Critical
Description NVD
The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password reset. This flaw allows an attacker to remotely reset the administrator password to a known value without authentication, granting full access to the camera feeds and settings.
Coverage 1 article · 1 outlet
- CVE-2026-5386 flaw in KMW CCTV lets hackers take over feedsSecurityOnline · first in our coverage