Milestone Systems XProtect Management Server vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Milestone Systems XProtect Management Server: 1 record(s), with affected versions and fixes.
CVE-2026-3014
Critical · 9.1
CWE-78 Jul 14, 2026
Remote Code Execution by administrative user on the Management Server
Milestone
has released a new version of XProtect® (and several cumulative patch updates)
which fix security vulnerability in Management Server API.
The vulnerability
causes users with edit permissions to the Management Server to be able to
execute arbitrary code in context of the Management Server Service.