PT-2026-44967 · Kmw · Cctv Security Cameras

Souvik Kandar · Published 2026-05-29 · Updated 2026-06-16 · CVE-2026-5386

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions KMW CCTV Security Cameras (affected versions not specified)

Description An issue exists that allows an unauthenticated attacker to remotely reset the administrator password to a known value. This action grants full access to the camera settings and feeds.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-620

Related Identifiers

CVE-2026-5386

Affected Products

Cctv Security Cameras

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-5386 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-148-06.json · Note
• https://twitter.com/threatcluster/status/2061825418550775981 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-26-148-06 · Note
• https://t.me/cveNotify/168544 · Telegram Post
• https://main.kmw.ro/pub/Firmware/521_421.zip · Note
• https://t.me/CVEtracker/55287 · Telegram Post
• https://twitter.com/threadlinqs/status/2061887604828549505 · Twitter Post