Which versions of Kenik Camera are affected by EUVD-2026-31672?

Kenik camera systems (KG-5230/KG-5260) in your infrastructure can be compromised from internal networks to expose passwords, configurations, and sensitive data, affecting physical security and…. A patch is available.

How to fix or mitigate EUVD-2026-31672?

Within 24 hours, scan your network to identify all Kenik KG-5230/KG-5260 cameras and assess which are accessible from adjacent network segments. Within 7 days, obtain the latest vendor firmware patches and deploy them to all affected cameras, prioritizing systems on less-protected network segments. Within 30 days, verify patch deployment across your entire camera fleet and confirm protection through vulnerability reassessment.

Kenik Camera EUVD-2026-31672

Q: What is the CVSS score of EUVD-2026-31672?

EUVD-2026-31672 has a CVSS 4.0 base score of 8.3 (High). CVSS vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-7766 HIGH

Path Traversal (CWE-22)

2026-05-25 CERT-PL

GHSA-85gf-3m67-qq6h

Path Traversal Kg 5230Tas Il 3 Kg 5230Tas Il G3 Kg 5230Das Il G3 Kg 5260Tzas Il 3 Kg 5260Dzas Il 3 Kg 5260Tzas Il G3 Kg 5260Dzas Il G3 Kg 5260Xxxx Il G 2

8.3

CVSS 4.0 · Vendor: CERT-PL

Severity by source

Vendor (CERT-PL) PRIMARY

8.3 HIGH

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.5 MEDIUM

Adjacent-network unauthenticated GET reads arbitrary files, so AV:A/AC:L/PR:N/UI:N with C:H and no integrity or availability impact (I:N/A:N).

3.1 AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.0 AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (CERT-PL).

CVSS VectorVendor: CERT-PL

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 23, 2026 - 17:20 vuln.today

Patch available

May 26, 2026 - 14:16 EUVD

CVE Published

May 25, 2026 - 11:16 nvd

UNKNOWN (no severity yet)

CVE Published

May 25, 2026 - 11:16 cve.org

HIGH 8.3

DescriptionCVE.org

Kenik Camera management Panel is vulnerable to Path Traversal vulnerability. An unauthenticated attacker can send GET request with arbitrary file path and read corresponding files located on the server.

The issue was fixed in version 2026-04-23 of the KG-5260xxxx-IL-(G)2 cameras. Rest of the products were fixed in version 2025-04-21.

AnalysisAI

Arbitrary file read in the Kenik IP camera management panel lets an unauthenticated attacker on the adjacent network retrieve any file on the device by supplying a crafted path in a single GET request. The flaw (CWE-22 path traversal) affects multiple Kenik KG-5230/KG-5260 series cameras and was coordinated by CERT-PL; there is no public exploit identified at time of analysis and EPSS exploitation probability is negligible (0.04%). Vendor firmware fixes are available, so the practical priority is patching exposed camera fleets rather than treating this as an internet-wide emergency.

Technical ContextAI

The affected component is the web-based management panel embedded in Kenik network (IP) surveillance cameras, a CCTV product line distributed primarily in the Polish/European market. The root cause is CWE-22 (Improper Limitation of a Pathname to a Restricted Directory): the HTTP handler that serves files does not canonicalize or constrain user-supplied path input, allowing directory-traversal sequences to escape the intended web root and reference arbitrary filesystem locations. The CPE set identifies the concrete affected firmware images - kenik kg-5230tas-il-3, kg-5230tas-il-g3, kg-5230das-il-g3, kg-5260tzas-il-3, kg-5260dzas-il-3, kg-5260tzas-il-g3, kg-5260dzas-il-g3, and kg-5260xxxx-il-(g)2. Because the request is an unauthenticated GET, the exposure is confidentiality of on-device files (configuration, credentials, system files) rather than code execution or tampering.

RemediationAI

Vendor-released patch: update KG-5260xxxx-IL-(G)2 cameras to firmware version 2026-04-23, and all other affected models (KG-5230TAS-IL-3, KG-5230TAS-IL-G3, KG-5230DAS-IL-G3, KG-5260TZAS-IL-3, KG-5260DZAS-IL-3, KG-5260TZAS-IL-G3, KG-5260DZAS-IL-G3) to firmware version 2025-04-21 or later, following the CERT-PL advisory at https://cert.pl/posts/2026/05/CVE-2026-7766. Where immediate updates are not possible, restrict reachability to the management panel: place cameras on an isolated VLAN and block the HTTP/HTTPS management port from general user and internet-facing segments (trade-off: legitimate NVR/VMS integrations must be explicitly allowlisted), and never expose the camera web interface to the internet or via port-forwarding. Because the file read is unauthenticated, also rotate any credentials or secrets stored on affected devices after patching, since prior exposure cannot be ruled out.