by Kastro
Paper/Archive/CVE-2026-5386

CVE-2026-5386

KMW KM-IP521 — KMW CCTV Security Cameras Unverified Password Change

EPSS 0.6%CVSS 9.1
critical.is priorityof 100
37
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 50.0.500 × 2010.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password reset. This flaw allows an attacker to remotely reset the administrator password to a known value without authentication, granting full access to the camera feeds and settings.

Affected

ProductAffectedFixed inSource
KM-IP5214.04.91.230307–CNA
KM-IP4214.04.53.210416–CNA

Scores by source

icscert (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refmain.kmw.ro/pub/Firmware/521_421.ziprefcisa.gov/news-events/ics-advisories/icsa-26-148-06refgithub.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-148-06.json