CVE-2026-8598 — Unauthenticated Export Service in ZKTeco CCTV Cameras
An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about…
Published: 2026-05-20 · CVSS: 9.1 · CVSS 4.0
An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about the camera such as open services and camera account credentials.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7