Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-20766

Milesight Cameras Heap-based Buffer Overflow

Description

An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Milesight MS-Cxx63-PD

Default version status: unaffected

  • 0 to ≤ 51.7.0.77-r12affected

Milesight MS-Cxx64-xPD

Default version status: unaffected

  • 0 to ≤ 51.7.0.77-r12affected

Milesight MS-Cxx73-xPD

Default version status: unaffected

  • 0 to ≤ 51.7.0.77-r12affected

Milesight MS-Cxx75-xxPD

Default version status: unaffected

  • 0 to ≤ 51.7.0.77-r12affected

Milesight MS-Cxx83-xPD

Default version status: unaffected

  • 0 to ≤ 51.7.0.77-r12affected

Milesight MS-Cxx74-PA

Default version status: unaffected

  • 0 to ≤ 3x.8.0.3-r11affected

Milesight MS-C8477-HPG1

Default version status: unaffected

  • 0 to ≤ 63.8.0.4-r3affected

Milesight MS-C8477-PC

Default version status: unaffected

  • 0 to ≤ 48.8.0.4-r3affected

Milesight MS-C5321-FPE

Default version status: unaffected

  • 0 to ≤ 62.8.0.4-r5affected

Milesight MS-Cxx72-xxxPE

Default version status: unaffected

  • 0 to ≤ 61.8.0.5-r2affected

Milesight MS-Cxx62-xxxPE

Default version status: unaffected

  • 0 to ≤ 61.8.0.5-r2affected

Milesight MS-Cxx52-xxxPE

Default version status: unaffected

  • 0 to ≤ 61.8.0.5-r2affected

Milesight MS-Cxx66-xxxPE

Default version status: unaffected

  • 0 to ≤ 61.8.0.5-r2affected

Milesight MS-Cxx66-xxxGPE

Default version status: unaffected

  • 0 to ≤ 61.8.0.5-r2affected

Milesight MS-Cxx61-xxxPE

Default version status: unaffected

  • 0 to ≤ 61.8.0.5-r2affected

Milesight MS-Cxx67-xxxPE

Default version status: unaffected

  • 0 to ≤ 61.8.0.5-r2affected

Milesight MS-Cxx71-xxxPE

Default version status: unaffected

  • 0 to ≤ 61.8.0.5-r2affected

Milesight MS-Cxx41-xxxPE

Default version status: unaffected

  • 0 to ≤ 61.8.0.5-r2affected

Milesight MS-Cxx76-PE

Default version status: unaffected

  • 0 to ≤ 61.8.0.5-r2affected

Milesight MS-Cxx65-PE

Default version status: unaffected

  • 0 to ≤ 61.8.0.5-r2affected

Milesight MS-Cxx66-xxxG1

Default version status: unaffected

  • 0 to ≤ 63.8.0.5-r3affected

Milesight MS-Cxx62-xxxG1

Default version status: unaffected

  • 0 to ≤ 63.8.0.5-r3affected

Milesight MS-Cxx72-xxxG1

Default version status: unaffected

  • 0 to ≤ 63.8.0.5-r3affected

Milesight MS-CQxx31-xxxG1

Default version status: unaffected

  • 0 to ≤ CQ_63.8.0.5-r1affected

Milesight MS-CQxx68-xxxG1

Default version status: unaffected

  • 0 to ≤ CQ_63.8.0.5-r1affected

Milesight MS-CQxx72-xxxG1

Default version status: unaffected

  • 0 to ≤ CQ_63.8.0.5-r1affected

Milesight MS-Nxxxx-NxE

Default version status: unaffected

  • 0 to ≤ 7x.9.0.19-r5affected

Milesight MS-Nxxxx-xxC

Default version status: unaffected

  • 0 to ≤ 7x.9.0.19-r5affected

Milesight MS-Nxxxx-xxE

Default version status: unaffected

  • 0 to ≤ 7x.9.0.19-r5affected

Milesight MS-Nxxxx-xxG

Default version status: unaffected

  • 0 to ≤ 7x.9.0.19-r5affected

Milesight MS-Nxxxx-xxH

Default version status: unaffected

  • 0 to ≤ 7x.9.0.19-r5affected

Milesight MS-Nxxxx-xxT

Default version status: unaffected

  • 0 to ≤ 7x.9.0.19-r5affected

Milesight PMC8266-FPE

Default version status: unaffected

  • 0 to ≤ PO_61.8.0.4_LPRaffected

Milesight PMC8266-FGPE

Default version status: unaffected

  • 0 to ≤ PO_61.8.0.4_LPRaffected

Milesight PM3322-E

Default version status: unaffected

  • 0 to ≤ PI_61.8.0.3_LPR-r3affected

Milesight TS4466-X4RIPG1

Default version status: unaffected

  • 0 to ≤ T_63.8.0.4_LPR-r3affected

Milesight TS5366-X12RIPG1

Default version status: unaffected

  • 0 to ≤ T_63.8.0.4_LPR-r3affected

Milesight TS8266-X4RIPG1

Default version status: unaffected

  • 0 to ≤ T_63.8.0.4_LPR-r3affected

Milesight TS4466-X4RIVPG1

Default version status: unaffected

  • 0 to ≤ T_63.8.0.4_LPR-r3affected

Milesight TS4466-RFIVPG1

Default version status: unaffected

  • 0 to ≤ T_63.8.0.4_LPR-r3affected

Milesight TS8266-X4RIVPG1

Default version status: unaffected

  • 0 to ≤ T_63.8.0.4_LPR-r3affected

Milesight TS8266-RFIVPG1

Default version status: unaffected

  • 0 to ≤ T_63.8.0.4_LPR-r3affected

Milesight TS4466-X4RIWG1

Default version status: unaffected

  • 0 to ≤ T_63.8.0.4_LPR-r3affected

Milesight TS8266-X4RIWG1

Default version status: unaffected

  • 0 to ≤ T_63.8.0.4_LPR-r3affected

Milesight TS5510-GVH

Default version status: unaffected

  • 0 to ≤ T_47.8.0.4_LPR-r7affected

Milesight TS5510-GH

Default version status: unaffected

  • 0 to ≤ T_47.8.0.4_LPR-r6affected

Milesight TS5511-GVH

Default version status: unaffected

  • 0 to ≤ T_47.8.0.4_LPR-r6affected

Milesight TS2966-X12TPE

Default version status: unaffected

  • 0 to ≤ T_61.8.0.4_LPR-r3affected

Milesight TS4466-X4RPE

Default version status: unaffected

  • 0 to ≤ T_61.8.0.4_LPR-r3affected

Milesight TS5366-X12PE

Default version status: unaffected

  • 0 to ≤ T_61.8.0.4_LPR-r3affected

Milesight TS8266-X4PE

Default version status: unaffected

  • 0 to ≤ T_61.8.0.4_LPR-r3affected

Milesight TS2966-X12TVPE

Default version status: unaffected

  • 0 to ≤ T_61.8.0.4_LPR-r3affected

Milesight TS4466-X4RVPE

Default version status: unaffected

  • 0 to ≤ T_61.8.0.4_LPR-r3affected

Milesight TS5366-X12VPE

Default version status: unaffected

  • 0 to ≤ T_61.8.0.4_LPR-r3affected

Milesight TS8266-X4VPE

Default version status: unaffected

  • 0 to ≤ T_61.8.0.4_LPR-r3affected

Milesight TS4441-X36RPE

Default version status: unaffected

  • 0 to ≤ T_61.8.0.4_LPR-r3affected

Milesight TS4441-X36RE

Default version status: unaffected

  • 0 to ≤ T_61.8.0.4_LPR-r3affected

Milesight TS4466-X4RWE

Default version status: unaffected

  • 0 to ≤ T_61.8.0.4_LPR-r3affected

Milesight TS8266-X4WE

Default version status: unaffected

  • 0 to ≤ T_61.8.0.4_LPR-r3affected

Milesight MS-C2964-RFLPC

Default version status: unaffected

  • 0 to ≤ T_45.8.0.3-r9affected

Milesight MS-C2972-RFLPC

Default version status: unaffected

  • 0 to ≤ T_45.8.0.3-r9affected

Milesight MS-C2966-RFLWPC

Default version status: unaffected

  • 0 to ≤ T_45.8.0.3-r9affected

Milesight TS2866-X4TPC

Default version status: unaffected

  • 0 to ≤ T_45.8.0.3-r9affected

Milesight TS2866-X4TVPC

Default version status: unaffected

  • 0 to ≤ T_45.8.0.3-r9affected

Milesight TS2866-X4TGPC

Default version status: unaffected

  • 0 to ≤ T_45.8.0.3-r9affected

Milesight TS2841-X36TPC

Default version status: unaffected

  • 0 to ≤ T_45.8.0.3-r9affected

Milesight TS2841-X36TPC/W

Default version status: unaffected

  • 0 to ≤ T_45.8.0.3-r9affected

Milesight TS2867-X5TPC

Default version status: unaffected

  • 0 to ≤ T_45.8.0.3-r9affected

Milesight TS2961-X12TPC

Default version status: unaffected

  • 0 to ≤ T_45.8.0.3-r9affected

Milesight TS8266-FPC/P

Default version status: unaffected

  • 0 to ≤ T_45.8.0.3-r9affected

Milesight MS-C2966-X12RLPC

Default version status: unaffected

  • 0 to ≤ T_45.8.0.3-r9affected

Milesight MS-C2966-X12RLVPC

Default version status: unaffected

  • 0 to ≤ T_45.8.0.3-r9affected

Milesight MS-C5366-X12LPC

Default version status: unaffected

  • 0 to ≤ T_45.8.0.3-r9affected

Milesight MS-C5366-X12LVPC

Default version status: unaffected

  • 0 to ≤ T_45.8.0.3-r9affected

Milesight MS-C5361-X12LPC

Default version status: unaffected

  • 0 to ≤ T_45.8.0.3-r9affected

Milesight MS-Cxx66-xxxxGOPC

Default version status: unaffected

  • 0 to ≤ 45.8.0.2-AIoT-r4affected

Milesight SC211

Default version status: unaffected

  • 0 to ≤ C_21.1.0.8-r4affected

Milesight SP111

Default version status: unaffected

  • 0 to ≤ 52.8.0.4-r5affected

Milesight MS-Cxx66-RFIPKG1

Default version status: unaffected

  • 0 to ≤ 63.8.0.4-r1-NXaffected

Milesight MS-Cxx72-RFIPKG1

Default version status: unaffected

  • 0 to ≤ 63.8.0.4-r1-NXaffected

Milesight MS-Cxx66-FIPKG1

Default version status: unaffected

  • 0 to ≤ 63.8.0.4-r1-NXaffected

Milesight MS-Cxx72-FIPKG1

Default version status: unaffected

  • 0 to ≤ 63.8.0.4-r1-NXaffected

References