CVE-2026-32649: Milesight Cameras OS Command Injection
A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_45.8.0.3-r10Patch MS-C2964-RFLPC - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_45.8.0.3-r10Patch MS-C2966-RFLWPC - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_45.8.0.3-r10Patch MS-C2966-X12RLPC - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_45.8.0.3-r10Patch MS-C2966-X12RLVPC - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_45.8.0.3-r10Patch MS-C2972-RFLPC - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 62.8.0.4-r6Patch MS-C5321-FPE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_45.8.0.3-r10Patch MS-C5361-X12LPC - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_45.8.0.3-r10Patch MS-C5366-X12LPC - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_45.8.0.3-r10Patch MS-C5366-X12LVPC - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 63.8.0.4-r4Patch MS-C8477-HPG1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 48.8.0.4-r4Patch MS-C8477-PC - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in CQ_63.8.0.5-r2Patch MS-CQxx31-xxxG1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in CQ_63.8.0.5-r2Patch MS-CQxx68-xxxG1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in CQ_63.8.0.5-r2Patch MS-CQxx72-xxxG1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 61.8.0.5-r2Patch MS-Cxx41-xxxPE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 61.8.0.5-r2Patch MS-Cxx52-xxxPE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 61.8.0.5-r2Patch MS-Cxx61-xxxPE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 63.8.0.5-r4Patch MS-Cxx62-xxxG1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 61.8.0.5-r2Patch MS-Cxx62-xxxPE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 51.7.0.77-r13Patch MS-Cxx63-PD - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 51.7.0.77-r13Patch MS-Cxx64-xPD - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 61.8.0.5-r2Patch MS-Cxx65-PE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 63.8.0.5-r2-NXPatch MS-Cxx66-FIPKG1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 63.8.0.5-r2-NXPatch MS-Cxx66-RFIPKG1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 63.8.0.5-r4Patch MS-Cxx66-xxxG1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 61.8.0.5-r2Patch MS-Cxx66-xxxGPE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 61.8.0.5-r2Patch MS-Cxx66-xxxPE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 45.8.0.2-AIoT-r5Patch MS-Cxx66-xxxxGOPC - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 61.8.0.5-r2Patch MS-Cxx67-xxxPE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 61.8.0.5-r2Patch MS-Cxx71-xxxPE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 63.8.0.5-r2-NXPatch MS-Cxx72-FIPKG1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 63.8.0.5-r2-NXPatch MS-Cxx72-RFIPKG1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 63.8.0.5-r4Patch MS-Cxx72-xxxG1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 61.8.0.5-r2Patch MS-Cxx72-xxxPE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 51.7.0.77-r13Patch MS-Cxx73-xPD - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 3x.8.0.3-r13Patch MS-Cxx74-PA - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 51.7.0.77-r13Patch MS-Cxx75-xxPD - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 61.8.0.5-r2Patch MS-Cxx76-PE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 51.7.0.77-r13Patch MS-Cxx83-xPD - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7x.9.0.19-r6Patch MS-Nxxxx-NxE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7x.9.0.19-r6Patch MS-Nxxxx-xxC - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7x.9.0.19-r6Patch MS-Nxxxx-xxE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7x.9.0.19-r6Patch MS-Nxxxx-xxG - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7x.9.0.19-r6Patch MS-Nxxxx-xxH - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7x.9.0.19-r6Patch MS-Nxxxx-xxT - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in PI_61.8.0.3-r5Patch PM3322-E - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in PO_61.8.0.4-r1Patch PMC8266-FGPE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in PO_61.8.0.4-r1Patch PMC8266-FPE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in C_21.1.0.8-r5Patch SC211 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 52.8.0.4-r6Patch SP111 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_45.8.0.3-r10Patch TS2841-X36TPC/W - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_45.8.0.3-r10Patch TS2841-X36TPC - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_45.8.0.3-r10Patch TS2866-X4TGPC - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_45.8.0.3-r10Patch TS2866-X4TPC - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_45.8.0.3-r10Patch TS2866-X4TVPC - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_45.8.0.3-r10Patch TS2867-X5TPC - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_45.8.0.3-r10Patch TS2961-X12TPC - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_61.8.0.4-r4Patch TS2966-X12TPE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_61.8.0.4-r4Patch TS2966-X12TVPE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_61.8.0.4-r4Patch TS4441-X36RE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_61.8.0.4-r4Patch TS4441-X36RPE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_63.8.0.4-r4Patch TS4466-RFIVPG1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_63.8.0.4-r4Patch TS4466-X4RIPG1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_63.8.0.4-r4Patch TS4466-X4RIVPG1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_63.8.0.4-r4Patch TS4466-X4RIWG1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_61.8.0.4-r4Patch TS4466-X4RPE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_61.8.0.4-r4Patch TS4466-X4RVPE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_61.8.0.4-r4Patch TS4466-X4RWE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_61.8.0.4-r4Patch TS5366-X12PE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_63.8.0.4-r4Patch TS5366-X12RIPG1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_61.8.0.4-r4Patch TS5366-X12VPE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_47.8.0.4-r8Patch TS5510-GH - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_47.8.0.4-r8Patch TS5510-GVH - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_47.8.0.4-r8Patch TS5511-GVH - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_45.8.0.3-r10Patch TS8266-FPC/P - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_63.8.0.4-r4Patch TS8266-RFIVPG1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_61.8.0.4-r4Patch TS8266-X4PE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_63.8.0.4-r4Patch TS8266-X4RIPG1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_63.8.0.4-r4Patch TS8266-X4RIVPG1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_63.8.0.4-r4Patch TS8266-X4RIWG1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_61.8.0.4-r4Patch TS8266-X4VPE - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in T_61.8.0.4-r4Patch TS8266-X4WE
Event History
Frequently Asked Questions
What is the severity of CVE-2026-32649?
CVE-2026-32649 has been classified as a critical severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2026-32649?
To fix CVE-2026-32649, update to the latest firmware version provided by Milesight that addresses the command injection vulnerability.
What versions of Milesight Cameras are affected by CVE-2026-32649?
CVE-2026-32649 affects specific firmware versions of Milesight Cameras as indicated by Milesight's advisories.
What impact does CVE-2026-32649 have on affected systems?
The impact of CVE-2026-32649 allows an attacker to execute arbitrary OS commands on the affected Milesight Cameras.
How can I determine if my Milesight Camera is vulnerable to CVE-2026-32649?
You can determine if your Milesight Camera is vulnerable to CVE-2026-32649 by checking the firmware version against the list of affected versions provided by Milesight.