Vulnerability Description
An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about the camera such as open services and camera account credentials.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-13
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-139-04
- https://www.zkteco.com/en/announcement/23
FAQ
What is CVE-2026-8598?
CVE-2026-8598 is a vulnerability with a CVSS score of 9.1 (CRITICAL). An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about the camera such as ope...
How severe is CVE-2026-8598?
CVE-2026-8598 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-8598?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.