CVE-2026-8598: ZKTeco SSC335-GC2063-Face-0b77 Solution Camera

Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days.

An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about the camera such as open services and camera account credentials.

Affected products

• ZKTeco SSC335-GC2063-Face-0b77 Solution Camera: before V5.0.1.2.20260421 (fixed in V5.0.1.2.20260421)

Published 2026-05-20. Last modified 2026-07-20.