Is CVE-2026-20766 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-20766 being exploited in the wild.

How severe is CVE-2026-20766?

High severity, with a CVSS score of 8.8, published 28 April 2026.

Which products and versions are affected?

Milesight Japan MS-C5321-FPE <=62.8.0.4-r5; Milesight Japan MS-C8477-HPG1 <=63.8.0.4-r3; Milesight Japan MS-C8477-PC <=48.8.0.4-r3; Milesight Japan MS-CQxx31-xxxG1 <=CQ_63.8.0.5-r1; and 55 more.

Is there a fix for CVE-2026-20766?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Am I affected by CVE-2026-20766?

Check whether you run Milesight Japan MS-C5321-FPE, Milesight Japan MS-C8477-HPG1, Milesight Japan MS-C8477-PC or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-20766: Milesight AIOT Cameras heap overflow in firmware

Q: Is there a fix for CVE-2026-20766?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: Am I affected by CVE-2026-20766?

Check whether you run Milesight Japan MS-C5321-FPE, Milesight Japan MS-C8477-HPG1, Milesight Japan MS-C8477-PC or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-20766 · Severity: high · CVSS 8.8 · Published 2026-04-28

An out-of-bounds memory access vulnerability in Milesight AIOT cameras could allow remote code execution or cause a device crash.

Technologies: Milesight Japan MS-Cxx52-xxxPE. Vendors: Milesight Japan.

Quick answers

Is CVE-2026-20766 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-20766 being exploited in the wild.
How severe is CVE-2026-20766?: High severity, with a CVSS score of 8.8, published 28 April 2026.
Which products and versions are affected?: Milesight Japan MS-C5321-FPE <=62.8.0.4-r5; Milesight Japan MS-C8477-HPG1 <=63.8.0.4-r3; Milesight Japan MS-C8477-PC <=48.8.0.4-r3; Milesight Japan MS-CQxx31-xxxG1 <=CQ_63.8.0.5-r1; and 55 more.
Is there a fix for CVE-2026-20766?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
Am I affected by CVE-2026-20766?: Check whether you run Milesight Japan MS-C5321-FPE, Milesight Japan MS-C8477-HPG1, Milesight Japan MS-C8477-PC or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Affected products

Milesight Japan MS-C5321-FPE <=62.8.0.4-r5
Milesight Japan MS-C8477-HPG1 <=63.8.0.4-r3
Milesight Japan MS-C8477-PC <=48.8.0.4-r3
Milesight Japan MS-CQxx31-xxxG1 <=CQ_63.8.0.5-r1
Milesight Japan MS-CQxx68-xxxG1 <=CQ_63.8.0.5-r1
Milesight Japan MS-CQxx72-xxxG1 <=CQ_63.8.0.5-r1
Milesight Japan MS-Cxx41-xxxPE <=61.8.0.5-r2
Milesight Japan MS-Cxx52-xxxPE <=61.8.0.5-r2
Milesight Japan MS-Cxx61-xxxPE <=61.8.0.5-r2
Milesight Japan MS-Cxx62-xxxG1 <=63.8.0.5-r3
Milesight Japan MS-Cxx62-xxxPE <=61.8.0.5-r2
Milesight Japan MS-Cxx63-PD <=51.7.0.77-r12
Milesight Japan MS-Cxx64-xPD <=51.7.0.77-r12
Milesight Japan MS-Cxx65-PE <=61.8.0.5-r2
Milesight Japan MS-Cxx66-xxxG1 <=63.8.0.5-r3
Milesight Japan MS-Cxx66-xxxGPE <=61.8.0.5-r2
Milesight Japan MS-Cxx66-xxxPE <=61.8.0.5-r2
Milesight Japan MS-Cxx67-xxxPE <=61.8.0.5-r2
Milesight Japan MS-Cxx71-xxxPE <=61.8.0.5-r2
Milesight Japan MS-Cxx72-xxxG1 <=63.8.0.5-r3
Milesight Japan MS-Cxx72-xxxPE <=61.8.0.5-r2
Milesight Japan MS-Cxx73-xPD <=51.7.0.77-r12
Milesight Japan MS-Cxx74-PA <=3x.8.0.3-r11
Milesight Japan MS-Cxx75-xxPD <=51.7.0.77-r12
Milesight Japan MS-Cxx76-PE <=61.8.0.5-r2
Milesight Japan MS-Cxx83-xPD <=51.7.0.77-r12
Milesight Japan MS-Nxxxx-NxE <=7x.9.0.19-r5
Milesight Japan MS-Nxxxx-xxC <=7x.9.0.19-r5
Milesight Japan MS-Nxxxx-xxE <=7x.9.0.19-r5
Milesight Japan MS-Nxxxx-xxG <=7x.9.0.19-r5
Milesight Japan MS-Nxxxx-xxH <=7x.9.0.19-r5
Milesight Japan MS-Nxxxx-xxT <=7x.9.0.19-r5
Milesight Japan PM3322-E <=PI_61.8.0.3_LPR-r3
Milesight Japan PMC8266-FGPE <=PO_61.8.0.4_LPR
Milesight Japan PMC8266-FPE <=PO_61.8.0.4_LPR
Milesight Japan TS2966-X12TPE <=T_61.8.0.4_LPR-r3
Milesight Japan TS2966-X12TVPE <=T_61.8.0.4_LPR-r3
Milesight Japan TS4441-X36RE <=T_61.8.0.4_LPR-r3
Milesight Japan TS4441-X36RPE <=T_61.8.0.4_LPR-r3
Milesight Japan TS4466-RFIVPG1 <=T_63.8.0.4_LPR-r3
Milesight Japan TS4466-X4RIPG1 <=T_63.8.0.4_LPR-r3
Milesight Japan TS4466-X4RIVPG1 <=T_63.8.0.4_LPR-r3
Milesight Japan TS4466-X4RIWG1 <=T_63.8.0.4_LPR-r3
Milesight Japan TS4466-X4RPE <=T_61.8.0.4_LPR-r3
Milesight Japan TS4466-X4RVPE <=T_61.8.0.4_LPR-r3
Milesight Japan TS4466-X4RWE <=T_61.8.0.4_LPR-r3
Milesight Japan TS5366-X12PE <=T_61.8.0.4_LPR-r3
Milesight Japan TS5366-X12RIPG1 <=T_63.8.0.4_LPR-r3
Milesight Japan TS5366-X12VPE <=T_61.8.0.4_LPR-r3
Milesight Japan TS5510-GH <=T_47.8.0.4_LPR-r6
Milesight Japan TS5510-GVH <=T_47.8.0.4_LPR-r7
Milesight Japan TS5511-GVH <=T_47.8.0.4_LPR-r6
Milesight Japan TS8266-RFIVPG1 <=T_63.8.0.4_LPR-r3
Milesight Japan TS8266-X4PE <=T_61.8.0.4_LPR-r3
Milesight Japan TS8266-X4RIPG1 <=T_63.8.0.4_LPR-r3
Milesight Japan TS8266-X4RIVPG1 <=T_63.8.0.4_LPR-r3
Milesight Japan TS8266-X4RIWG1 <=T_63.8.0.4_LPR-r3
Milesight Japan TS8266-X4VPE <=T_61.8.0.4_LPR-r3
Milesight Japan TS8266-X4WE <=T_61.8.0.4_LPR-r3

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.