Skip to content
OpenAdvisories
High ICSA-26-176-05 2 CVEs

H.VIEW HV-500S6 IP Camera

Published Jun 25, 2026 · Updated Jun 25, 2026

Vendor: H.VIEW Product: HV-500S6 IP Camera

Summary

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code and upload malicious files to the affected device.

Vulnerabilities 2

  • High 7.2
    CVE-2026-55975

    H.VIEW HV-500S6 IP Camera OS Command Injection

    A vulnerability exists in H.View IP cameras that could allow an authenticated user to supply unsanitized XML fields to the device's certificate generation interface, which are incorporated into a backend certificate creation command without proper input valid…

    H.VIEW HV-500S6 IP Camera
  • High 7.2
    CVE-2026-56414

    H.VIEW HV-500S6 IP Camera Unrestricted Upload of File with Dangerous Type

    A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow authenticated users to store arbitrary file content to fixed, persistent filesystem locations without validating file type, structure, or size. This design omission enable…

    H.VIEW HV-500S6 IP Camera

Revision history

  1. #1

    Initial Publication

References