Skip to content
OpenAdvisories

Vendor

Milesight

94 known vulnerabilities.

Milesight at a glance

Last 12 months
6
Critical · all time
7
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 5 vulnerabilities, 1 critical May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 1 vulnerability September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202610
Jul 202600
Jun 202600
May 202600
Apr 202651
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202510
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

UR32L 64 DeviceHub 6 MilesightVPN 6 MS-Cxx63-PD 5 MS-Cxx64-xPD 5 MS-Cxx73-xPD 5 MS-Cxx75-xxPD 5 MS-Cxx83-xPD 5 MS-Cxx74-PA 5 MS-C8477-HPG1 5 MS-C8477-PC 5 MS-C5321-FPE 5 MS-Cxx72-xxxPE 5 MS-Cxx62-xxxPE 5 MS-Cxx52-xxxPE 5 MS-Cxx66-xxxPE 5 MS-Cxx66-xxxGPE 5 MS-Cxx61-xxxPE 5 MS-Cxx67-xxxPE 5 MS-Cxx71-xxxPE 5 MS-Cxx41-xxxPE 5 MS-Cxx76-PE 5 MS-Cxx65-PE 5 MS-Cxx66-xxxG1 5 MS-Cxx62-xxxG1 5 MS-Cxx72-xxxG1 5 MS-CQxx31-xxxG1 5 MS-CQxx68-xxxG1 5 MS-CQxx72-xxxG1 5 MS-Nxxxx-NxE 5 MS-Nxxxx-xxC 5 IP security cameras 5 MS-Nxxxx-xxE 5 MS-Nxxxx-xxG 5 MS-Nxxxx-xxH 5 MS-Nxxxx-xxT 5 PMC8266-FPE 5 PMC8266-FGPE 5 PM3322-E 5 TS4466-X4RIPG1 5

Latest advisories

  • Critical max 9.8
    ICSA-26-113-03 5 CVEs

    Milesight Cameras

    Successful exploitation of these vulnerabilities could crash the device being accessed or allow remote code execution.

    Milesight
  • Medium max 6.8
    ICSA-25-126-02 1 CVE

    Milesight UG65-868M-EA

    Successful exploitation of this vulnerability could allow any user with admin privileges to inject arbitrary shell commands.

    Milesight
All Critical High Medium Low Exploited only Public exploit

94 results · Feed

  • High 7.6
    CVE-2026-29988

    A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device m…

    Milesight UC511 V4 AM319 VS360
  • High 8.8
    CVE-2026-20766

    Milesight Cameras Heap-based Buffer Overflow

    An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras.

    Milesight MS-Cxx66-xxxGPE MS-Nxxxx-xxG TS5510-GH
  • Medium 6.8
    CVE-2026-32649

    Milesight Cameras OS Command Injection

    A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras.

    Milesight PMC8266-FGPE MS-Cxx64-xPD TS5366-X12PE
  • Critical 9.8
    CVE-2026-32644

    Milesight Cameras Use of Hard-coded Cryptographic Key

    Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys.

    Milesight TS5366-X12RIPG1 MS-Cxx83-xPD MS-Cxx66-xxxG1
  • High 8.8
    CVE-2026-27785

    Milesight Cameras Use of Hard-coded Credentials

    Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials.

    Milesight MS-Cxx62-xxxPE MS-Nxxxx-NxE TS4466-X4RIWG1
  • High 7.1
    CVE-2026-28747

    Milesight Cameras Authorization Bypass Through User-Controlled Key

    A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras allows authorization to be bypassed.

    Milesight MS-Nxxxx-xxH TS5511-GVH MS-Cxx61-xxxPE
  • Medium 6.8
    CVE-2025-4043

    Milesight UG65-868M-EA Improper Access Control for Volatile Memory Containing Boot Code

    An admin user can gain unauthorized write access to the /etc/rc.local file on the device, which is executed on a system boot.

    Milesight UG65-868M-EA
  • Medium 6.1
    CVE-2024-36392

    MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    Milesight DeviceHub
  • Critical 9.1
    CVE-2024-36391

    MileSight DeviceHub - CWE-320: Key Management Errors

    MileSight DeviceHub - CWE-320: Key Management Errors may allow Authentication Bypass and Man-In-The-Middle Traffic

    Milesight DeviceHub
  • High 7.5
    CVE-2024-36390

    MileSight DeviceHub - CWE-20 Improper Input Validation

    MileSight DeviceHub - CWE-20 Improper Input Validation may allow Denial of Service

    Milesight DeviceHub
  • Critical 9.8
    CVE-2024-36389

    MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values

    MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values may allow Authentication Bypass

    Milesight DeviceHub
  • Critical 10.0
    CVE-2024-36388

    MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function

    MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function

    Milesight DeviceHub
  • Critical 9.8
    CVE-2024-27776

    MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

    MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') may allow Unauthenticated RCE

    Milesight DeviceHub
  • High 8.8
    CVE-2023-47166

    A firmware update vulnerability exists in the luci2-io file-import functionality of Milesight UR32L v32.3.0.7-r2. A spe…

    Milesight UR32L
  • High 7.2
    CVE-2023-23550

    An OS command injection vulnerability exists in the ys_thirdparty user_delete functionality of Milesight UR32L v32.3.0.…

    Milesight UR32L
  • Medium 6.5
    CVE-2023-23547

    A directory traversal vulnerability exists in the luci2-io file-export mib functionality of Milesight UR32L v32.3.0.5. …

    Milesight UR32L
  • High 7.5
    CVE-2023-23571

    An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially craft…

    Milesight UR32L
  • Critical 9.8
    CVE-2023-23902

    A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5. A specially craf…

    Milesight UR32L
  • High 7.2
    CVE-2023-22306

    An OS command injection vulnerability exists in the libzebra.so bridge_group functionality of Milesight UR32L v32.3.0.5…

    Milesight UR32L
  • High 7.2
    CVE-2023-22659

    An os command injection vulnerability exists in the libzebra.so change_hostname functionality of Milesight UR32L v32.3.…

    Milesight UR32L
  • High 7.3
    CVE-2023-22844

    An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality of Milesight VPN v2.0…

    Milesight MilesightVPN
  • High 7.5
    CVE-2023-23907

    A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-cr…

    Milesight MilesightVPN
  • High 7.3
    CVE-2023-22319

    A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2. A speci…

    Milesight MilesightVPN
  • Medium 4.7
    CVE-2023-24496

    Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN…

    Milesight MilesightVPN
  • Medium 4.7
    CVE-2023-24497

    Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN…

    Milesight MilesightVPN
  • High 8.1
    CVE-2023-22371

    An os command injection vulnerability exists in the liburvpn.so create_private_key functionality of Milesight VPN v2.0.…

    Milesight MilesightVPN
  • High 8.8
    CVE-2023-24520

    Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR3…

    Milesight UR32L
  • High 8.8
    CVE-2023-24519

    Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR3…

    Milesight UR32L
  • Medium 4.2
    CVE-2023-23546

    A misconfiguration vulnerability exists in the urvpn_client functionality of Milesight UR32L v32.3.0.5. A specially-cra…

    Milesight UR32L
  • High 8.8
    CVE-2023-24583

    Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32…

    Milesight UR32L
  • High 8.8
    CVE-2023-24582

    Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32…

    Milesight UR32L
  • High 7.2
    CVE-2023-22365

    An OS command injection vulnerability exists in the ys_thirdparty check_system_user functionality of Milesight UR32L v3…

    Milesight UR32L
  • High 8.8
    CVE-2023-22299

    An OS command injection vulnerability exists in the vtysh_ubus _get_fw_logs functionality of Milesight UR32L v32.3.0.5.…

    Milesight UR32L
  • High 7.2
    CVE-2023-24595

    An OS command injection vulnerability exists in the ys_thirdparty system_user_script functionality of Milesight UR32L v…

    Milesight UR32L
  • High 8.8
    CVE-2023-22653

    An OS command injection vulnerability exists in the vtysh_ubus tcpdump_start_cb functionality of Milesight UR32L v32.3.…

    Milesight UR32L
  • High 8.8
    CVE-2023-24018

    A stack-based buffer overflow vulnerability exists in the libzebra.so.0.0.0 security_decrypt_password functionality of …

    Milesight UR32L
  • High 7.2
    CVE-2023-25124

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of …

    Milesight UR32L
  • High 7.2
    CVE-2023-25123

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of …

    Milesight UR32L
  • High 7.2
    CVE-2023-25120

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of …

    Milesight UR32L
  • High 7.2
    CVE-2023-25112

    Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of …

    Milesight UR32L