Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-29988

Cleartext transmission of sensitive information in Milesight AM102/102L V2 and others

CVSS 8.3 HighEPSS 0.0017 · 5th percentile

Published by the CVE Program (CNA: mitre) at 26 Aug 2026, 03:14 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Milesight AM102/102L V2
  • affected 1.4 and earlier custom
Other versions: unaffected
Milesight AM103/103L V2
  • affected 1.8 and earlier custom
Other versions: unaffected
Milesight AM304L
  • affected 1.2 and earlier custom
Other versions: unaffected
Milesight AM305L
  • affected 1.2 and earlier custom
Other versions: unaffected
Milesight AM307 V2
  • affected 1.4 and earlier custom
Other versions: unaffected
Milesight AM308
  • affected 1.7 and earlier custom
Other versions: unaffected
Milesight AM308L
  • affected 1.7 and earlier custom
Other versions: unaffected
Milesight AM319
  • affected 1.6 and earlier custom
Other versions: unaffected
Milesight WS101
  • affected 1.5 and earlier custom
Other versions: unaffected
Milesight WS136
  • affected 1.6 and earlier custom
Other versions: unaffected
Milesight WS156
  • affected 1.6 and earlier custom
Other versions: unaffected
Milesight WS201
  • affected 1.2 and earlier custom
Other versions: unaffected
Milesight WS202
  • affected 1.8 and earlier custom
Other versions: unaffected
Milesight WS203
  • affected 1.3 and earlier custom
Other versions: unaffected
Milesight WS301
  • affected 1.15 and earlier custom
Other versions: unaffected
Milesight WS303
  • affected 1.5 and earlier custom
Other versions: unaffected
Milesight WS50X (2W-W11-EU) [501/502/503]
  • affected 1.3 and earlier custom
Other versions: unaffected
Milesight WS50X (3W-W11-EU) [501/502/503]
  • affected 1.2 and earlier custom
Other versions: unaffected
Milesight WS50X (3W-W12-EU) [501/502/503]
  • affected 1.2 and earlier custom
Other versions: unaffected
Milesight WS51X [513/515]
  • affected 1.9 and earlier custom
Other versions: unaffected
Milesight WS52X [523/525]
  • affected 1.12 and earlier custom
Other versions: unaffected
Milesight WS558
  • affected 1.1 and earlier custom
Other versions: unaffected
Milesight VS321
  • affected 321.1.0.1-r5 and earlier custom
Other versions: unaffected
Milesight VS360
  • affected 1.2-r1 and earlier custom
Other versions: unaffected
Milesight VS350 V3
  • affected 1.1 and earlier custom
Other versions: unaffected
Milesight VS351
  • affected 1.5 and earlier custom
Other versions: unaffected
Milesight VS330
  • affected 1.3 and earlier custom
Other versions: unaffected
Milesight VS340
  • affected 1.1 and earlier custom
Other versions: unaffected
Milesight VS341
  • affected 1.1 and earlier custom
Other versions: unaffected
Milesight VS370
  • affected 1.1 and earlier custom
Other versions: unaffected
Milesight GS301
  • affected 1.2 and earlier custom
Other versions: unaffected
Milesight EM300-TH V3
  • affected 1.10 and earlier custom
Other versions: unaffected
Milesight EM320-TH
  • affected 1.6 and earlier custom
Other versions: unaffected
Milesight TS201 V2
  • affected 1.1 and earlier custom
Other versions: unaffected
Milesight TS30x V2
  • affected 1.1 and earlier custom
Other versions: unaffected
Milesight WT201 V2
  • affected 1.5 and earlier custom
Other versions: unaffected
Milesight WT211 V2
  • affected 1.5 and earlier custom
Other versions: unaffected
Milesight UC501
  • affected 1.6 and earlier custom
Other versions: unaffected
Milesight UC502
  • affected 1.6 and earlier custom
Other versions: unaffected
Milesight UC511 V4
  • affected 1.6 and earlier custom
Other versions: unaffected

And 24 more products. The full list is on the CVE record.

Identifiers
CVE-2026-29988
CNA
mitre
Weakness (CWE)
CWE-319
Tags
Published
26 Aug 2026
Updated
26 Aug 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
8.3 High 4.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:H/SA:N CNA (mitre)Used for this record
7.6 High 3.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CNA (mitre)
  • CISA KEV Not listed.
  • EPSS 0.0017, the 5th percentile, on 9 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 26 Aug 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.