CVE-2026-79396
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
雄迈（Xiongmai）IP 摄像头 XM530 在固件版本 HMT.CM2005-v220608.1837 及更早版本中，将静态账户凭据以未加密的明文形式硬编码存储于 文件，并编译进 可执行文件中。这种使用硬编码默认凭据的做法使得远程攻击者能够获取该摄像头的完全管理员控制权。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-79396
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing remote attackers to gain full administrative control over the camera.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2026-79396
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-79396
请登录查看更多情报信息。
Other References for CVE-2026-79396 (1)
Same Patch Batch · n/a · 2026-09-11 · 10 CVEs total
| CVE-2026-71641 | EGO-Planner-v2交互缺陷致服务拒绝 | |
| CVE-2026-71644 | RACER FSM缺失默认分支致无人机碰撞 | |
| CVE-2026-78807 | wpa_supplicant <2.12 PMKSA缓存验证缺失 | |
| CVE-2026-71646 | RACER abcdef1234版FastExplorationFSM拒绝服务漏洞 | |
| CVE-2025-69904 | Linkstack v4.8.4及更早版本路径遍历漏洞 | |
| CVE-2026-79393 | 雄迈IPC Sofia服务堆溢出漏洞 | |
| CVE-2026-79395 | 雄迈相机IPC鉴权缺陷 | |
| CVE-2026-79394 | 雄迈摄像头XM530 RTSP服务默认禁用认证致数据泄露 | |
| CVE-2026-79362 | WCF 6.1.0-6.1.23/6.2.0-6.2.6 缓存投毒RCE |
IV. Related Vulnerabilities
V. Comments for CVE-2026-79396
No comments yet