PT-2026-39324 · Ezviz · Ezviz App

Cisco Talos · Published 2026-05-09 · Updated 2026-05-09 · CVE-2026-32683

Mitre

CVSS v3.1

5.3

Medium

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces, which pose a data transmission risk. Attackers can exploit this by eavesdropping on network requests to obtain data.Users are advised to upgrade the app to the latest version and enable the video encryption feature.

Fix

Related Identifiers

CVE-2026-32683

Affected Products

Ezviz App

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-32683 · Security Note
• https://ezviz.com/inter/trust-center/security/security-notice/2026.05.08 · Note
• https://hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-cloud-function-modules-of-some-hikvisi · Note