01 Record

CVE-2026-29988

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with

HighPUBLISHEDCNA: mitre

CNA base score8.3 CVSS v4.0CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:H/SA:N

View raw JSON

02 Description

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: Not scored by EPSS
EPSS percentile: Not scored by EPSS
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Not recorded
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-08-26 03:14Z56 MIN AGO

Last updated

2026-08-26 03:14Z56 MIN AGO

Reserved

2026-03-04

Assigning CNA

mitre

Record state

PUBLISHED

Severity

High (CVSS 8.3)

CNA CVSS vector

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:H/SA:N

Weaknesses

CWE-319Cleartext Transmission of Sensitive InformationBase

Data version

5.2

Document digest

f54c4d8543c129d2a99a79604100d642bb14a5aa009a0260ac2382c021fcc319

05 Affected products

VendorProductVersionsPlatforms

MilesightAM102/102L V20 to 1.4—

MilesightAM103/103L V20 to 1.8—

MilesightAM304L0 to 1.2—

MilesightAM305L0 to 1.2—

MilesightAM307 V20 to 1.4—

MilesightAM3080 to 1.7—

MilesightAM308L0 to 1.7—

MilesightAM3190 to 1.6—

MilesightWS1010 to 1.5—

MilesightWS1360 to 1.6—

MilesightWS1560 to 1.6—

MilesightWS2010 to 1.2—

MilesightWS2020 to 1.8—

MilesightWS2030 to 1.3—

MilesightWS3010 to 1.15—

MilesightWS3030 to 1.5—

MilesightWS50X (2W-W11-EU) [501/502/503]0 to 1.3—

MilesightWS50X (3W-W11-EU) [501/502/503]0 to 1.2—

MilesightWS50X (3W-W12-EU) [501/502/503]0 to 1.2—

MilesightWS51X [513/515]0 to 1.9—

MilesightWS52X [523/525]0 to 1.12—

MilesightWS5580 to 1.1—

MilesightVS3210 to 321.1.0.1-r5—

MilesightVS3600 to 1.2-r1—

MilesightVS350 V30 to 1.1—

MilesightVS3510 to 1.5—

MilesightVS3300 to 1.3—

MilesightVS3400 to 1.1—

MilesightVS3410 to 1.1—

MilesightVS3700 to 1.1—

MilesightGS3010 to 1.2—

MilesightEM300-TH V30 to 1.10—

MilesightEM320-TH0 to 1.6—

MilesightTS201 V20 to 1.1—

MilesightTS30x V20 to 1.1—

MilesightWT201 V20 to 1.5—

MilesightWT211 V20 to 1.5—

MilesightUC5010 to 1.6—

MilesightUC5020 to 1.6—

MilesightUC511 V40 to 1.6—

MilesightUC512 V40 to 1.6—

MilesightUC521 LoRaWAN®0 to 1.2—

MilesightUC521 Cellular0 to 1.3—

MilesightEM300-DI0 to 1.3—

MilesightEM300-MCS V30 to 1.10—

MilesightEM300-MLD V30 to 1.10—

MilesightEM300-SLD V30 to 1.10—

MilesightEM300-ZLD V30 to 1.10—

MilesightEM320-TILT0 to 1.3—

MilesightEM400-TLD LoRaWAN®0 to 1.2—

MilesightEM400-TLD NB-IoT0 to 1.5—

MilesightEM400-MUD LoRaWAN®0 to 1.2—

MilesightEM400-MUD NB-IoT0 to 1.6—

MilesightEM400-UDL LoRaWAN®0 to 1.2—

MilesightEM410-RDL Cellular0 to 1.1—

MilesightEM411-RDL0 to 1.2—

MilesightEM500-CO2 V20 to 1.11—

MilesightEM500-SWL0 to 1.11—

MilesightEM500-LGT0 to 1.11—

MilesightEM500-PT100 V20 to 1.11—

4 further entries not shown. The complete list is in the raw JSON document.

06 References

www.milesight.comhttps://www.milesight.com/legal/vulnerabilities-in-some-milesight-sensorsvendor-advisorymitigation

CVE-2026-29988

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Description

03 Metadata

04 Affected products

05 References

CVE-2026-29988

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References