CVE-2026-55975

Name of the Vulnerable Software and Affected Versions H.View HV-500S6 IP cameras (affected versions not specified)

Description An authenticated user can supply unsanitized XML fields to the certificate generation interface. These fields are incorporated into a backend certificate creation command without proper input validation, allowing for command execution with elevated privileges. This issue has been exploited in real-world incidents to enable privilege escalation and lateral movement across connected infrastructure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.