PT-2026-90045

CVE-2026-79394

·

Published

2026-09-11

·

Updated

2026-09-22

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Xiongmai IP Camera XM530 versions prior to HMT.CM2005-v220608.1837
Description An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon allows remote unauthenticated attackers to access live H.264 video and G.711 audio feeds. This data is transmitted in cleartext over unencrypted RTP/UDP.
Recommendations Update Xiongmai IP Camera XM530 to a version later than HMT.CM2005-v220608.1837.
Exploitability
Exploit
Fix
Vendors
Affected products
Weakness enumeration
CWE-1188: Initialization of a Resource with an Insecure Default
Related identifiers
CVE-2026-79394
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com