CVE-2025-65857

PoC —

CVSS 3.1

7.5 high

EPSS

<1%p35

Published

Dec 22, 2025 (Dec 22, 2025)

Modified

Jul 5, 2026

Description

An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access.

Vendors: xiongmaitech
Products: xm530v200 x6-weq 8m firmware
Weakness: CWE-359
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.