CVE-2026-79396 - Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing remote attackers to gain full administrative control over the camera

Back Back to CVE browser

CRITICAL

Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing remote attackers to gain full administrative control over the camera

Published Sep 11, 2026

9.8

CRITICAL

CVSS 3.1

EPSS 0.58%

Description

Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing remote attackers to gain full administrative control over the camera.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-798

Hard-coded Credentials

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-76189		Advisory
https://github.com/ShiroiBoushi/vulnerability-research/tree/main/CVE-2026-79396		exploit

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 11, 2026

Updated Sep 14, 2026

Reserved Aug 25, 2026

Link CVE-2026-79396

CISA Vulnrichment

Updated Sep 14, 2026

NVD

Status Received

Modified Sep 14, 2026

Link CVE-2026-79396

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Sep 11, 2026

Updated Sep 14, 2026

Link EUVD-2026-76189

GitHub

No data