CyberSecBulletin

Xiongmai vulnerabilities

We track 2 vulnerabilities in Xiongmai products across 8 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 29, 2026.

2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score

Latest Xiongmai vulnerabilities

  • 8.8 High severity

    DVR/NVR devices: Improper Neutralization of Special Elements used in an OS Command

    CVE-2026-34005XiongmaiEPSS 1.57%

    In Sofia on Xiongmai DVR/NVR (AHB7008T-MH-V2 and NBD7024H-P) 4.03.R11 devices, root OS command injection can occur via shell metacharacters in the HostName value via an authenticated DVRIP protocol (TCP port 34567) request to the NetWork.NetCommon configuratio

  • 9.8 Critical severity

    AHB7804R-MH-V2: Improper Access Control

    CVE-2024-3765XiongmaiEPSS 1.26%

    A vulnerability classified as critical was found in Xiongmai AHB7804R-MH-V2, AHB8004T-GL, AHB8008T-GL, AHB7004T-GS-V3, AHB7004T-MHV2, AHB8032F-LME and XM530_R80X30-PQ_8M. Affected by this vulnerability is an unknown functionality of the component Sofia Service