Is CVE-2026-27785 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-27785 being exploited in the wild.

How severe is CVE-2026-27785?

High severity, with a CVSS score of 7.1, published 27 April 2026.

Which products and versions are affected?

Milesight MS-Cxx63-PD <=51.7.0.77-r12; Milesight MS-Cxx64-xPD <=51.7.0.77-r12; Milesight MS-Cxx73-xPD <=51.7.0.77-r12; Milesight MS-Cxx75-xxPD <=51.7.0.77-r12; and 9 more.

Is there a fix for CVE-2026-27785?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-27785 attacked?

It is attacked from the adjacent network, in an operating system.

Am I affected by CVE-2026-27785?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-27785: Milesight AIOT Cameras authorization bypass via weak key generation

Q: Is there a fix for CVE-2026-27785?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2026-27785 attacked?

It is attacked from the adjacent network, in an operating system.

Q: Am I affected by CVE-2026-27785?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-27785 · Severity: high · CVSS 7.1 · Published 2026-04-27

A security vulnerability has been identified in several Milesight AIOT camera models, which are used for professional video surveillance and monitoring. Due to a flaw in how the cameras generate security keys, an attacker could bypass the login process to gain unauthorized access to the device. This could allow an intruder to view private video feeds, change camera settings, or disrupt security operations.

Quick answers

Is CVE-2026-27785 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-27785 being exploited in the wild.
How severe is CVE-2026-27785?: High severity, with a CVSS score of 7.1, published 27 April 2026.
Which products and versions are affected?: Milesight MS-Cxx63-PD <=51.7.0.77-r12; Milesight MS-Cxx64-xPD <=51.7.0.77-r12; Milesight MS-Cxx73-xPD <=51.7.0.77-r12; Milesight MS-Cxx75-xxPD <=51.7.0.77-r12; and 9 more.
Is there a fix for CVE-2026-27785?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-27785 attacked?: It is attacked from the adjacent network, in an operating system.
Am I affected by CVE-2026-27785?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A weak key generation vulnerability (CWE-639) exists in the firmware of various Milesight AIOT camera models. The flaw stems from an insecure implementation of key generation logic, which allows for authorization bypass through user-controlled keys. An attacker on the adjacent network could exploit this vulnerability to bypass authentication mechanisms. Successful exploitation could lead to unauthorized access to the camera's management interface, potentially resulting in data exfiltration or device takeover. Users are advised to update to the latest firmware versions provided by the vendor.

Affected products

Milesight MS-Cxx63-PD <=51.7.0.77-r12
Milesight MS-Cxx64-xPD <=51.7.0.77-r12
Milesight MS-Cxx73-xPD <=51.7.0.77-r12
Milesight MS-Cxx75-xxPD <=51.7.0.77-r12
Milesight MS-Cxx83-xPD <=51.7.0.77-r12
Milesight MS-Cxx74-PA <=3x.8.0.3-r11
Milesight MS-C8477-HPG1 <=63.8.0.4-r3
Milesight MS-C8477-PC <=48.8.0.4-r3
Milesight MS-C5321-FPE <=62.8.0.4-r5
Milesight MS-Cxx72-xxxPE <=61.8.0.5-r2
Milesight MS-Cxx62-xxxPE <=61.8.0.5-r2
Milesight MS-Cxx52-xxxPE <=61.8.0.5-r2
Milesight MS-Nxxxx-NxE <=7x.9.0.19-r5

Identifiers

CVE-2026-27785
CVE-2026-20766
CVE-2026-32644
CVE-2026-28747
CVE-2026-32649

Timeline

2026-04-23: advisory: CISA ICS Advisory ICSA-26-113-03 published
2026-04-27: disclosed: CVE published to NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.