---
id: CVE-2025-65856
title: >-
  Authentication bypass vulnerability in Xiongmai XM530 IP cameras on Firmware
  V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06 allows unauthenticated remote
  attackers to access sensitive device information and live video streams
summary: >-
  Authentication bypass vulnerability in Xiongmai XM530 IP cameras on Firmware
  V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06 allows unauthenticated remote
  attackers to access sensitive device information and live video streams. The
  ONVIF i…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-306
vendor: xiongmaitech
product: xm530v200_x6-weq_8m_firmware
affected:
  - xm530v200_x6-weq_8m_firmware = 5.00.r02.000807d8.10010.346624.s.onvif_21.06
published: '2025-12-22'
updated: '2026-07-05'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-65856'
references:
  - url: 'https://luismirandaacebedo.github.io/CVE-2025-65856/'
    label: cve@mitre.org
tags:
  - nvd
  - exploit-available
epss: 0.00745
epssPercentile: 0.52755
ingestedAt: '2026-07-06T16:44:34.494Z'
exploits:
  github: 2
  githubRepos:
    - 'https://github.com/LuisMirandaAcebedo/CVE-2025-65856'
    - 'https://github.com/KostasEreksonas/XM_ONVIF_auth_bypass'
  checkedAt: '2026-09-25T08:20:46.547Z'
exploitAvailable: true
---

## Overview

Authentication bypass vulnerability in Xiongmai XM530 IP cameras on Firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06 allows unauthenticated remote attackers to access sensitive device information and live video streams. The ONVIF implementation fails to enforce authentication on 31 critical endpoints, enabling direct unauthorized video stream access.

## Affected

- `xm530v200_x6-weq_8m_firmware = 5.00.r02.000807d8.10010.346624.s.onvif_21.06`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.