CVE Watchtower


← Back to CVE List

CVE-2026-8598NVD

Vulnerability Summary

An undocumented configuration export port is accessible on some models
of ZKTeco CCTV cameras. This port does not require authentication and
exposes critical information about the camera such as open services and
camera account credentials.
Severity Level
CRITICAL(9.1)
Published Date
May 20, 2026
Last Modified
May 20, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.51%Probability
Root Weakness (CWE)
N/A
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityNone