9.1 CriticalCWE-288
CVE-2026-8598
Unauthenticated Export Service in ZKTeco CCTV Cameras
ZKTecoSSC335-GC2063-Face-0b77 Solution Camera
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.6%probability of exploitation in the next 30 days
Higher than 48% of scored CVEs
SeverityCVSS
9.1Critical
Description NVD
An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about the camera such as open services and camera account credentials.
Coverage 1 article · 1 outlet
- ZKTeco CCTV CamerasCISA · first in our coverage · official notice