KMW CCTV Security Cameras

Key Points:

• CVE-2026-5386 is a critical vulnerability in KMW CCTV Security Cameras that allows unauthenticated attackers to reset the administrator password, granting full access to camera feeds and settings.
• The affected models include KM-IP521 and KM-IP421, with a CVSS score of 9.1 indicating high severity. This vulnerability poses significant risks to critical infrastructure sectors such as commercial facilities, government services, and financial services.
• It is recommended to minimize network exposure for these devices, ensure they are not accessible from the internet, and utilize firewalls and VPNs for remote access.

Technical Details: The vulnerability allows remote attackers to exploit an unauthenticated password reset feature, enabling unauthorized access to sensitive camera functionalities.

MITRE ATT&CK Techniques: None mentioned

IOCs Mentioned: None mentioned