CVE-2026-56414
Last modified
CVE-2026-56414 is a high-severity vulnerability rated 8.6/10 on the CVSS scale. A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow authenticated users to store arbitrary file content to fixed, persistent filesystem locations without validating file type, structure, or size. This design omission enables the placement of unexpected or malformed data in locations intended for trusted certificate material, which could affect system integrity or behavior even after reboot.. EPSS estimates a 0.40% chance of exploitation in the next 30 days.
Description
A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow authenticated users to store arbitrary file content to fixed, persistent filesystem locations without validating file type, structure, or size. This design omission enables the placement of unexpected or malformed data in locations intended for trusted certificate material, which could affect system integrity or behavior even after reboot.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| H.VIEW | HV-500S6 IP Camera | IPCAM_V4.06.88.251229 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-56414?
How severe is CVE-2026-56414?
How do I fix CVE-2026-56414?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-56409xmlwf in libexpat before 2.8.2 has an integer overflow for t…6.5
- CVE-2026-5641A vulnerability was found in PHPGurukul Online Shopping Port…6.3
- CVE-2026-56410xmlwf in libexpat before 2.8.2 has an integer overflow in re…6.9
- CVE-2026-56411xmlwf in libexpat before 2.8.2 has an integer overflow in en…6.9
- CVE-2026-56412libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS i…5.9
- CVE-2026-56413Storage Concentrator (SC & SCVM) contains a command injectio…10
- CVE-2026-56415Storage Concentrator (SC & SCVM) contains a command injectio…10
- CVE-2026-56416In NLnet Labs Unbound up to and including version 1.25.1, wh…4.8
- CVE-2026-5642A vulnerability was determined in Cyber-III Student-Manageme…7.3
- CVE-2026-56422Multiple MISP core controllers and model capture paths accep…9.4
- CVE-2026-56423MISP Core contained broken access-control checks in the bulk…8.8
- CVE-2026-56424MISP core contained multiple broken access-control flaws whe…8.8
Are you affected by CVE-2026-56414?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST