Milestone Systems

Products

ProductCVEsExploitedLatest
XProtect VMS4–Dec 16, 2025
XProtect Management Server1–Jul 14, 2026

Exploited and recent CVEs

  • CVE-2026-3014 Critical 9.1 Remote Code Execution by administrative user on the Management Server 0.8%
  • CVE-2025-0836 Medium 6.3 XProtect MIP API Missing Authorization 0.2%
  • CVE-2025-1688 Medium 5.5 System configuration password reset 0.2%
  • CVE-2024-12569 High 7.8 Sensitive Information in Driver’s Log File 0.1%
  • CVE-2024-3506 Medium 6.7 Camera Driver possible Buffer Overflow 0.2%