Xiongmai IP Camera Flaw Lets Attackers Bypass Authentication

Gbhackers •Divya • April 24, 2026

A critical security vulnerability has been identified in Hangzhou Xiongmai Technology’s XM530 IP Cameras, putting countless commercial facilities at risk. This severe flaw allows remote attackers to bypass authentication protocols and access sensitive device information easily. The Cybersecurity and Infrastructure Security Agency (CISA) published an official alert regarding the issue on April 23, 2026. Critical […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in Xiongmai IP Cameras Allows Remote Access A critical vulnerability has been discovered in Hangzhou Xiongmai Technology’s XM530 IP Cameras, tracked as CVE-2025-65856. This flaw enables attackers to bypass authentication protocols, granting them remote access to the cameras and potentially sensitive information. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an alert on April 23, 2026, highlighting the severity of the issue. The vulnerability affects numerous commercial facilities that utilize these cameras, raising concerns about unauthorized surveillance and data breaches. The flaw was first publicly disclosed in December 2025, with a proof of concept (PoC) released shortly before. Organizations using these cameras are urged to take immediate action to mitigate risks. The scope of the impact is significant, given the widespread deployment of these devices in various sectors. 2 sources 70

Xiongmai IP Camera Flaw Lets Attackers Bypass Authentication

The full story

Extracted Entities

Attack Types (1)

Companies (1)