Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2026-8598

Unauthenticated Export Service in ZKTeco CCTV Cameras

Description

An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about the camera such as open services and camera account credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ZKTeco SSC335-GC2063-Face-0b77 Solution Camera

Default version status: unaffected

  • 0 to < V5.0.1.2.20260421affected
  • V5.0.1.2.20260421unaffected

References