vivotek

Top products

The 15 most recently published vulnerabilities affecting vivotek.

• CVE-2026-35718A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmware 0300a allows authenticated attackers to read any file on the device via sending a crafte...6.5Jun 2, 2026
• CVE-2026-35717A stack-based buffer overflow in the export_language.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root via a crafted PO...6.3Jun 2, 2026
• CVE-2026-35716A stack-based buffer overflow in the motion_privacy.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root via an oversized ...6.3Jun 2, 2026
• CVE-2026-30652A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows a...8.8Jun 2, 2026
• CVE-2026-30650A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-...8.8Jun 2, 2026
• CVE-2026-30649Buffer Overflow vulnerability in VIVOTEK INC FD8136-VVTK-0300a allows a remote attacker to execute arbitrary code via the set_getparam.cgi component7.3Jun 2, 2026
• CVE-2025-66052Command injection in Vivotek IP7137 cameras7.2Jan 9, 2026
• CVE-2025-66051Path traversal in Vivotek IP7137 cameras6.5Jan 9, 2026
• CVE-2025-66050No password set for administrative account in Vivotek IP7137 cameras9.8Jan 9, 2026
• CVE-2025-66049Unprotected RTSP stream in Vivotek IP7137 cameras7.5Jan 9, 2026
• CVE-2025-3403Vivotek NVR ND8422P/NVR ND9525P/NVR ND9541P HTML Form sensitive information in source2.7Apr 8, 2025
• CVE-2024-7443Vivotek IB8367A upload_file.cgi getenv command injection6.3Aug 3, 2024
• CVE-2024-7442Vivotek SD9364 upload_file.cgi getenv command injection6.3Aug 3, 2024
• CVE-2024-7441Vivotek SD9364 httpd read stack-based overflow8.8Aug 3, 2024
• CVE-2024-7440Vivotek CC8160 upload_file.cgi getenv command injection6.3Aug 3, 2024