VulnSocial

CVE-2026-5386Disclosure

LOWCVSS 9.1 · CRITICAL

Exploitation ongoing with high activity in latest observed window (2 mentions)

Immediate actions

  • Prioritize remediation for affected systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password reset. This flaw allows an attacker to remotely reset the administrator password to a known value without authentication, granting full access to the camera feeds and settings.

Back to dashboard
3.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-620

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • Active exploitation appears in 1 classified signals
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked 1d ago at 2 mentions (2026-06-02); latest day: 2
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01122Mentions · 2026-06-02: 2Mentions · 2026-06-03: 2Active Exploitation · 2026-06-02: 1Technical Details · 2026-06-02: 2Technical Details · 2026-06-03: 106-0206-03
Signal classification2 categories
Disclosure
375.0%
Active Exploitation
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-06-022
Active Exploitation1Disclosure1
2026-06-032
Disclosure2
Full discourse4 posts
  • elhacker.NET@elhackernet
    Disclosure

    Vulnerabilidad crítica en CCTV de KMW permite acceso no autorizado a cámaras Se ha detectado una falla de seguridad crítica en las cámaras de vigilancia KMW CCTV, identificada como CVE-2026-5386 https://blog.elhacker.net/2026/06/vulnerabilidad-critica-en-cctv-de-kmw.html

    Post summary

    A critical security flaw (CVE-2026-5386) has been identified in KMW CCTV cameras, potentially allowing unauthorized access, with no additional exploit, patch, or detailed technical information provided.

    0311742.0K
    140.9K followersView on X
  • The Daily Tech Feed@dailytechonx
    Disclosure

    Critical flaw in KMW CCTV cameras (CVE-2026-5386) allows unauthorized access to live feeds. Organizations must act now to secure their systems. Link: https://thedailytechfeed.com/critical-flaw-in-kmw-cctv-cameras-allows-unauthorized-access-high-risk-vulnerability-affects-key-infrastructure-sectors/ #KMW #CCTV #CVE20265386 #Vulnerability #Cybersecurity #Surveillance #IoT #Security #Exploit #Access #Feeds #Cameras #Firmware #Infrastructure #Networks #Monitoring #Risk #Patch #Exposure #Breach

    Post summary

    A newly disclosed CVE-2026-5386 flaw in KMW CCTV cameras enables unauthorized live‑feed access. No exploit details, mitigation steps, or evidence of active exploitation are provided.

    0000077
    352 followersView on X
  • ThreadLinqs@threadlinqs
    Active Exploitation

    NEW THREAT INTEL: KMW IP Cameras - unauth admin password reset (CVE-2026-5386, CVSS 9.1) = full takeover. 9 detections. https://intel.threadlinqs.com/threat/TL-2026-0661 #ThreatIntel #ICS #CVE https://t.co/4DtRukFVur

    Post summary

    CVE-2026-5386 enables unauthenticated admin password reset on KMW IP Cameras, leading to full takeover; 9 detections suggest active exploitation in the wild.

    0000043
    54 followersView on X
  • ThreatCluster@threatcluster
    Disclosure

    BREAKING: CISA discloses CVE-2026-5386 in KMW CCTV cameras, CVSS 9.1 flaw lets attackers hijack live surveillance feeds and device settings with unauthorized access. https://threatcluster.io/cluster/critical-kmw-cctv-vulnerability-exposes-surveillance-feeds-t-cf697031

    Post summary

    CISA has disclosed CVE-2026-5386, a high‑severity vulnerability in KMW CCTV cameras that lets attackers hijack live surveillance feeds and modify device settings. No exploitation or patch details are provided.

    0000061
    294 followersView on X

Explore more

Back to dashboard