VYPR

IP Camera XM530 firmware

by Xiongmaitech

CVEs (2)

  • CVE-2026-79394HigSep 11, 2026
    risk 0.49cvss 7.5epss 0.01

    An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier ships with authentication disabled, allowing remote unauthenticated attackers to access live H.264 video…

  • CVE-2026-79393HigSep 11, 2026
    risk 0.49cvss 7.5epss 0.01

    A heap-based buffer overflow vulnerability in the WS-Addressing Action transformation function in the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier allows remote unauthenticated attackers to cause a denial of service or potentially…