An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras.

An out-of-bounds memory access vulnerability has been identified in specific firmware versions of Milesight AIOT cameras. This vulnerability is tracked as CVE-2026-20766 and affects industrial IoT camera systems. The issue involves improper memory handling that could potentially allow attackers to access memory outside the intended boundaries. CISA has issued an advisory (ICSA-26-113-03) regarding this vulnerability. Milesight has made firmware updates available to address this security flaw. The vulnerability impacts the security of IoT camera infrastructure and could pose risks to surveillance systems.