Xiongmai

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 5
    Known Exploited: 0
    2
    Critical Level Threats
    3
    High Level Threats
    0
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-79393

    Heap Buffer Overflow in Xiongmai IPC Daemon

    Last Modified: Sep 21, 2026
    Published: Sep 11, 2026

    CVE-2026-79395

    WS‑Security UsernameToken Authentication Bypass in Sofia IPC Daemon Enabling Privileged ONVIF Actions

    Last Modified: Sep 21, 2026
    Published: Sep 11, 2026

    CVE-2026-79394

    Unauthenticated Access to Unencrypted RTSP Streams in Xiongmai IP Camera Firmware

    Last Modified: Sep 21, 2026
    Published: Sep 11, 2026

    CVE-2026-79396

    Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing remote attackers to gain full administrative control over the camera.

    Last Modified: Sep 14, 2026
    Published: Sep 11, 2026

    CVE-2026-34005

    Root OS Command Injection via HostName on Xiongmai DVR/NVR

    Last Modified: Jun 17, 2026
    Published: Mar 29, 2026
    Items Per Page