View CSAF Summary Successful exploitation of this vulnerability could result in information disclosure, including capture of camera account credentials. The following versions of ZKTeco CCTV Cameras are affected: SSC335-GC2063-Face-0b77 Solution CVSS Vendor Equipment Vulnerabilities v3 9.1 ZKTeco ZKTeco CCTV Cameras Authentication Bypass Using an Alternate Path or Channel Background Critical Infrastructure Sectors: Commercial Facilities Countries/Areas Deployed: Worldwide Company Headquarters Location: China Vulnerabilities Expand All + CVE-2026-8598 An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about the camera such as open services and camera account credentials. View CVE Details Affected Products ZKTeco CCTV Cameras Vendor: ZKTeco Product Version: ZKTeco SSC335-GC2063-Face-0b77 Solution: <V5.0.1.2.20260421 Product Status: known_affected Remediations Mitigation ZKTeco has patched this vulnerability in firmware version V5.0.1.2.20260421. ZKTeco recommends that users upgrade to firmware version V5.0.1.2.20260421 or later at their earliest opportunity. Mitigation Please see the security advisory from ZKTeco here: https://www.zkteco.com/en/announcement/23 for further information. https://www.zkteco.com/en/announcement/23 ...