Vulnerability in Ezviz App

CVE-2026-32683

Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces, which pose a data transmission risk. Attackers can exploit this by eavesdropping on network requests to obtain data.Users are advised to upgrade the app to the latest version and enable the video encryption feature.

Published · last modified .

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N.

EPSS exploit prediction

EPSS: 0.001 (0.3th percentile), scored .

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 0th percentile — 0.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2026-32683: held from 0.001 to 0.001.

EPSS over last 30 days · oldest: 0.001 · newest: 0.001 · change: -0.000

Affected products

  • Ezviz App — versions iOS: Versions prior to 7.3.1, Android: Versions prior to 7.3.0.0210

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-32683?
CVE-2026-32683 is a medium-severity vulnerability in Ezviz App, classified under Cleartext Transmission of Sensitive Information. CVSS score: 5.3/10. Published 2026-05-09.
How severe is CVE-2026-32683?
Medium severity. CVSS v3 base score is 5.3 out of 10.