PT-2026-44967 · Kmw · Km-Ip421+1

Published 2026-05-29 · Updated 2026-05-29 · CVE-2026-5386

NVD

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password reset. This flaw allows an attacker to remotely reset the administrator password to a known value without authentication, granting full access to the camera feeds and settings.

Fix

Weakness Enumeration

CWE-620

Related Identifiers

CVE-2026-5386

Affected Products

Km-Ip421

Km-Ip521

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-5386 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-148-06.json · Note
• https://main.kmw.ro/pub/Firmware/521_421.zip · Note
• https://cisa.gov/news-events/ics-advisories/icsa-26-148-06 · Note