Critical severity9.1NVD Advisory· Published May 20, 2026· Updated Jun 16, 2026

CVE-2026-8598

Description

An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about the camera such as open services and camera account credentials.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisagov/Csafreferences

Patches

Vulnerability mechanics

References

github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-139-04.jsonnvd
www.cisa.gov/news-events/ics-advisories/icsa-26-139-04nvd
www.zkteco.com/en/announcement/23nvd

News mentions

ZKTeco CCTV Cameras
CISA ICS Advisories

cvss	0.591
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000