CVE-2024-27776: Milesight Devicehub

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') may allow Unauthenticated RCE

Affected products

• Milesight Devicehub: version 3.0.1-r1 only

Published 2024-06-02. Last modified 2026-06-17.