You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve-2025-65856
About this tag
CVE-2025-65856 is a critical authentication-bypass vulnerability in Hangzhou Xiongmai Technology XM530 IP cameras running firmware V5.00.R02.000807D8.10010.346624.S.ONVIF_21.06. CISA rates it 9.8 Critical under CVSS 3.1, allowing unauthenticated attackers to access sensitive device information and live video streams. Xiongmai has not responded to CISA's coordination attempts, leaving users without vendor guidance. Discussions on WindowsForum cover the disclosure, severity, and implications for defenders managing these devices.
The latest CISA advisory on the Hangzhou Xiongmai Technology Co., Ltd XM530 IP Camera is not a routine firmware notice; it is a critical authentication-bypass disclosure that can let unauthenticated attackers reach sensitive device information and live video streams. CISA says the affected...