PT-2026-39324 · Ezviz · Ezviz

Cisco Talos · Published 2026-05-09 · Updated 2026-05-12 · CVE-2026-32683

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions EZVIZ products (affected versions not specified)

Description Certain products use outdated cloud feature modules with legacy API interfaces, creating a data transmission risk. This allows attackers to obtain data by eavesdropping on network requests.

Recommendations Upgrade the app to the latest version. Enable the video encryption feature.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2026-32683

Affected Products

Ezviz

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-32683 · Security Note
• https://t.me/cveNotify/162864 · Telegram Post
• https://ezviz.com/inter/trust-center/security/security-notice/2026.05.08 · Note
• https://twitter.com/CVEarity/status/2053827411578667492 · Twitter Post
• https://hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-cloud-function-modules-of-some-hikvisi · Note
• https://t.me/cveNotify/163308 · Telegram Post
• https://twitter.com/CVEnew/status/2053131373976895638 · Twitter Post
• https://t.me/CVEtracker/53219 · Telegram Post