Milestone Systems vulnerabilities
We track 2 vulnerabilities in Milestone Systems products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 14, 2026.
2vulnerabilities
1critical
1high
0exploited
8.4average CVSS score
Latest Milestone Systems vulnerabilities
- 9.1 Critical severity
XProtect Management Server: Improper Neutralization of Special Elements used in an OS Command
Milestone has released a new version of XProtect® (and several cumulative patch updates) which fix security vulnerability in Management Server API. The vulnerability causes users with edit permissions to the Management Server to be able to execute arbitrary co
- 7.8 High severity
XProtect VMS: Insertion of Sensitive Information into Log File
Disclosure of sensitive information in a Milestone XProtect Device Pack driver’s log file for third-party cameras, allows an attacker to read camera credentials stored in the Recording Server under specific conditions.