https://vulnogram.org/ Most recent CVEs assigned by milestone (milestone). https://vulnogram.org/seaview/icons/milestone.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-3014 https://vulnogram.org/CVE-2026-3014 Milestone has released a new version of XProtect® (and several cumulative patch updates) which fix security vulnerability in Management Server API. The vulnerability causes users with edit permissions to the Management Server to be able to execute ar… Critical Tue, 14 Jul 2026 09:45:22 GMT https://vulnogram.org/CVE-2025-0836 https://vulnogram.org/CVE-2025-0836 Missing Authorization vulnerability in Milestone Systems XProtect VMS allows users with read-only access to Management Server to have full read/write access to MIP Webhooks API. Medium Tue, 16 Dec 2025 11:02:25 GMT https://vulnogram.org/CVE-2025-1688 https://vulnogram.org/CVE-2025-1688 Milestone Systems has discovered a security vulnerability in Milestone XProtect installer that resets system configuration password after the upgrading from older versions using specific installers. The system configuration password is an additional,… Medium Tue, 15 Apr 2025 10:13:51 GMT https://vulnogram.org/CVE-2024-12569 https://vulnogram.org/CVE-2024-12569 Disclosure of sensitive information in a Milestone XProtect Device Pack driver’s log file for third-party cameras, allows an attacker to read camera credentials stored in the Recording Server under specific conditions. High Thu, 19 Dec 2024 08:41:33 GMT https://vulnogram.org/CVE-2024-3506 https://vulnogram.org/CVE-2024-3506 A possible buffer overflow in selected cameras' drivers from XProtect Device Pack can allow an attacker with access to internal network to execute commands on Recording Server under strict conditions. High Tue, 08 Oct 2024 10:00:38 GMT