CVE-2026-8598
An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras.
Published May 20, 2026 · updated Jul 20, 2026
An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about the camera such as open services and camera account credentials.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
May 20, 2026 · NIST NVD
Detected
An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about the camera such as open services and camera account credentials.
Jul 20, 2026 · NIST NVD
Updated
An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about the camera such as open services and camera account credentials.
Sources
- CVE.orgVulnerability recordCVE-2026-8598
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-8598
An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about the camera such as open services and camera account credentials.
nvd.nist.gov