Which versions of Ms Cxx63 Pd are affected by CVE-2026-28747?

A HIGH severity authorization bypass in Milesight AIOT network cameras (MS-Cxx and MS-Nxxxx series) enables adjacent attackers to bypass authentication and gain unauthorized access to camera…

How to fix or mitigate CVE-2026-28747?

Within 24 hours, inventory all Milesight AIOT cameras and NVR devices (MS-Cxx and MS-Nxxxx series) deployed across your network and document their current firmware versions. Within 7 days, isolate affected devices to restricted network segments or VLANs, revoke unnecessary remote and cloud access capabilities, and implement network monitoring for abnormal authentication patterns. Within 30 days, establish a patch readiness process including testing procedures, and monitor the Milesight security advisory for vendor patch availability; plan immediate deployment upon release.

Ms Cxx63 Pd CVE-2026-28747

Q: What is the CVSS score of CVE-2026-28747?

CVE-2026-28747 has a CVSS 4.0 base score of 7.3 (High). CVSS vector: CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

HIGH

Authorization Bypass Through User-Controlled Key (CWE-639)

2026-04-27 icscert

Authentication Bypass Ms Cxx63 Pd Ms Cxx64 Xpd Ms Cxx73 Xpd Ms Cxx75 Xxpd Ms Cxx83 Xpd Ms Cxx74 Pa Ms C8477 Hpg1 Ms C8477 Pc Ms C5321 Fpe Ms Cxx72 Xxxpe Ms Cxx62 Xxxpe Ms Cxx52 Xxxpe Ms Cxx66 Xxxpe Ms Cxx66 Xxxgpe Ms Cxx61 Xxxpe Ms Cxx67 Xxxpe Ms Cxx71 Xxxpe Ms Cxx41 Xxxpe Ms Cxx76 Pe Ms Cxx65 Pe Ms Cxx66 Xxxg1 Ms Cxx62 Xxxg1 Ms Cxx72 Xxxg1 Ms Cqxx31 Xxxg1 Ms Cqxx68 Xxxg1 Ms Cqxx72 Xxxg1 Ms Nxxxx Nxe Ms Nxxxx Xxc Ms Nxxxx Xxe Ms Nxxxx Xxg Ms Nxxxx Xxh Ms Nxxxx Xxt Pmc8266 Fpe Milesight

7.3

CVSS 4.0 · Vendor: icscert

Severity by source

Vendor (icscert) PRIMARY

7.3 HIGH

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (icscert) · only source for this CVE.

CVSS VectorVendor: icscert

Attack Vector

Adjacent

Attack Complexity

High

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

Analysis Generated

Jul 24, 2026 - 04:26 vuln.today

CVSS changed

Apr 27, 2026 - 23:22 NVD

7.1 (HIGH) 7.3 (HIGH)

CVE Published

Apr 27, 2026 - 22:44 nvd

HIGH 7.3

DescriptionCVE.org

A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras allows authorization to be bypassed.

AnalysisAI

Authorization bypass in Milesight AIOT network cameras stems from weak cryptographic key generation in specific firmware builds, letting an adjacent attacker defeat authentication controls and gain unauthorized access to camera functions. The affected line spans a broad catalog of Milesight IP camera and NVR models (MS-Cxx and MS-Nxxxx series). No public exploit identified at time of analysis; EPSS is negligible at 0.01% and CISA SSVC records no observed exploitation, so this is a disclosed-but-not-yet-exploited ICS/IoT issue.