CVE-2026-28747
Milesight Cameras Authorization Bypass Through User-Controlled Key
- State
- Published
- Severity
- 7.3 High
- Published
- Apr 27, 2026
- Updated
- Apr 28, 2026
- Reserved
- Mar 12, 2026
Description
A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras allows authorization to be bypassed.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.3 High | CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | icscert |
| 3.1 | 7.1 High | CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H | icscert |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
MS-Cxx63-PDMilesight |
|
MS-Cxx64-xPDMilesight |
|
MS-Cxx73-xPDMilesight |
|
MS-Cxx75-xxPDMilesight |
|
MS-Cxx83-xPDMilesight |
|
MS-Cxx74-PAMilesight |
|
MS-C8477-HPG1Milesight |
|
MS-C8477-PCMilesight |
|
MS-C5321-FPEMilesight |
|
MS-Cxx72-xxxPEMilesight |
|
MS-Cxx62-xxxPEMilesight |
|
MS-Cxx52-xxxPEMilesight |
|
MS-Cxx66-xxxPEMilesight |
|
MS-Cxx66-xxxGPEMilesight |
|
MS-Cxx61-xxxPEMilesight |
|
MS-Cxx67-xxxPEMilesight |
|
MS-Cxx71-xxxPEMilesight |
|
MS-Cxx41-xxxPEMilesight |
|
MS-Cxx76-PEMilesight |
|
MS-Cxx65-PEMilesight |
|
MS-Cxx66-xxxG1Milesight |
|
MS-Cxx62-xxxG1Milesight |
|
MS-Cxx72-xxxG1Milesight |
|
MS-CQxx31-xxxG1Milesight |
|
MS-CQxx68-xxxG1Milesight |
|
MS-CQxx72-xxxG1Milesight |
|
MS-Nxxxx-NxEMilesight |
|
MS-Nxxxx-xxCMilesight |
|
MS-Nxxxx-xxEMilesight |
|
MS-Nxxxx-xxGMilesight |
|
MS-Nxxxx-xxHMilesight |
|
MS-Nxxxx-xxTMilesight |
|
PMC8266-FPEMilesight |
|
PMC8266-FGPEMilesight |
|
PM3322-EMilesight |
|
TS4466-X4RIPG1Milesight |
|
TS5366-X12RIPG1Milesight |
|
TS8266-X4RIPG1Milesight |
|
TS4466-X4RIVPG1Milesight |
|
TS4466-RFIVPG1Milesight |
|
TS8266-X4RIVPG1Milesight |
|
TS8266-RFIVPG1Milesight |
|
TS4466-X4RIWG1Milesight |
|
TS8266-X4RIWG1Milesight |
|
TS5510-GVHMilesight |
|
TS5510-GHMilesight |
|
TS5511-GVHMilesight |
|
TS2966-X12TPEMilesight |
|
TS4466-X4RPEMilesight |
|
TS5366-X12PEMilesight |
|
TS8266-X4PEMilesight |
|
TS2966-X12TVPEMilesight |
|
TS4466-X4RVPEMilesight |
|
TS5366-X12VPEMilesight |
|
TS8266-X4VPEMilesight |
|
TS4441-X36RPEMilesight |
|
TS4441-X36REMilesight |
|
TS4466-X4RWEMilesight |
|
TS8266-X4WEMilesight |
|
MS-C2964-RFLPCMilesight |
|
MS-C2972-RFLPCMilesight |
|
MS-C2966-RFLWPCMilesight |
|
TS2866-X4TPCMilesight |
|
TS2866-X4TVPCMilesight |
|
TS2866-X4TGPCMilesight |
|
TS2841-X36TPCMilesight |
|
TS2841-X36TPC/WMilesight |
|
TS2867-X5TPCMilesight |
|
TS2961-X12TPCMilesight |
|
TS8266-FPC/PMilesight |
|
MS-C2966-X12RLPCMilesight |
|
MS-C2966-X12RLVPCMilesight |
|
MS-C5366-X12LPCMilesight |
|
MS-C5366-X12LVPCMilesight |
|
MS-C5361-X12LPCMilesight |
|
MS-Cxx66-xxxxGOPCMilesight |
|
SC211Milesight |
|
SP111Milesight |
|
MS-Cxx66-RFIPKG1Milesight |
|
MS-Cxx72-RFIPKG1Milesight |
|
MS-Cxx66-FIPKG1Milesight |
|
MS-Cxx72-FIPKG1Milesight |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.