CVE-2026-32683

5.3 mediumEPSS 0.09%

Medium (5.3). EPSS 0.09% chance of exploitation in the next 30 days.

Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces, which pose a data transmission risk. Attackers can exploit this by eavesdropping on network requests to obtain data.Users are advised to upgrade the app to the latest version and enable the video encryption feature.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.09% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2026-05-09
Modified: 2026-07-25
Record from: the NVD, synced 2026-10-19

References

https://www.ezviz.com/inter/trust-center/security/security-notice/2026.05.08
https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-cloud-function-modules-of-some-hikvisi/

Check your stack JSON