VULNERABILITY INTELLIGENCE
CVE-2026-8598
CVSS score9.1 CRITICAL
EPSS probability0.51%
CISA KEVNot currently listed
Published2026-05-20
Last modified2026-07-20
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description
An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about the camera such as open services and camera account credentials.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-288