Critical vulnerability in KMW CCTV Security Cameras allows unauthenticated remote password reset. CVE-2026-5386 affects KM-IP521 and KM-IP421 models with CVSS score 9.1. Attackers can reset administrator password to known value without authentication, granting full access to camera feeds and settings. KMW has released firmware update to address the vulnerability. Affects multiple critical infrastructure sectors worldwide including commercial facilities, government services, and financial services.