Ms-cxx64-xpd CVEs and Security Vulnerabilities

CVE-2026-27785

Milesight Cameras Use of Hard-coded Credentials

Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials.

CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed

Vendors

Milesight

Products

Ms-c2964-rflpc Ms-c2966-rflwpc Ms-c2966-x12rlpc and 79 more

CVE-2026-32644

Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed

Vendors

Milesight

Products

Ms-c2964-rflpc Ms-c2966-rflwpc Ms-c2966-x12rlpc and 79 more

CVE-2026-32649

A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Milesight

Products

Ms-c2964-rflpc Ms-c2966-rflwpc Ms-c2966-x12rlpc and 79 more

CVE-2026-20766

An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed

Vendors

Milesight

Products

Ms-c2964-rflpc Ms-c2966-rflwpc Ms-c2966-x12rlpc and 79 more

CVE-2026-28747

A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras allows authorization to be bypassed.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Milesight

Products

Ms-c2964-rflpc Ms-c2966-rflwpc Ms-c2966-x12rlpc and 79 more