VIVOTEK (Vendor): news timeline & CVEs

Related CVEsby mentions

CVE-2025-32489.8100%

Unauthenticated RCE in Langflow /api/v1/validate/code

published Apr 7, 2025· Langflow KEV ransomware PoC ×2

CVE-2019-07089.8100%

Unauthenticated RCE in Microsoft Remote Desktop Services (BlueKeep)

published May 16, 2019· Microsoft Remote Desktop Services KEV ransomware PoC ×4

CVE-2018-105629.8100%

Unauthenticated RCE in Dasan GPON Routers (CVE-2018-10562)

published May 4, 2018· Dasan Gigabit Passive Optical Network (GPON) routers KEV ransomware PoC ×2

CVE-2017-01477.5100%

Information Disclosure in Microsoft Windows SMBv1 Server (CVE-2017-0147)

published Mar 17, 2017· microsoft Windows Vista KEV ransomware PoC ×5

CVE-2020-118995.418%

Out-of-Bounds Read in Treck TCP/IP Stack (IPv6) Affecting Dell Wyse Thin Clients

published Jun 17, 2020· Treck TCP/IP stack (IPv6) KEV PoC

CVE-2019-122559.875%

Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4)

published Aug 9, 2019· windriver vxworks PoC

CVE-2019-122609.823%

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4)

published Aug 9, 2019· windriver vxworks

CVE-2026-227559.321%

OS Command Injection in Vivotek 9-Series IP Camera Firmware

published Jan 13, 2026· Vivotek FD-series models: FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391

CVE-2024-75917.244%

Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection.This issue affects

published Sep 5, 2024· kemptechnologies loadmaster

CVE-2025-465656.01%

Vite: 6.2.7, 6.1.6, 5.4.19, and 4.5.14, the contents of files in the project root that are denied by a file matching pattern can be…

published May 1, 2025· vitejs vite PoC

The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws

Cyble sensors logged exploitation attempts against about 20 flaws as CISA issued 14 ICS advisories.

Cyble's weekly report says its global sensors recorded exploitation attempts against about 20 vulnerabilities, including new flaws in WordPress, Apache Solr, and Langflow and older bugs in GPON routers and embedded TCP/IP stacks. Named issues include WordPress CVE-2026-63030, Solr hardcoded-credential flaw CVE-2026-44825, Langflow CVE-2026-9198, and n8n RCE CVE-2025-68613; CVE-2020-11899 was the most attempted. CISA published 14 ICS advisories covering 54 vulnerabilities, 13 rated critical. Sensors also captured CoinMiner, WannaCry, Mirai and related malware, phishing, brute force, and a MacSync macOS infostealer campaign aimed at crypto users.

CybleOct 14, 13:36 UTC · 2d agoExploit / PoC in the wildCVE-2026-63030 CVE-2026-60137 CVE-2026-44825+22 CVEs1

VIVOTEK Camera Firmware

CISA warns a CVSS 10 command injection in many VIVOTEK cameras can allow unauthenticated root command execution.

CISA advisory ICSA-26-272-03 covers CVE-2026-22755, a command-injection flaw (CWE-77) in firmware used by dozens of VIVOTEK network camera models across V, C, S, Dome, Panoramic, and Bullet lines. The issue scores CVSS 10.0 with network access, no privileges, and no user interaction, and may allow remote command execution, potentially as root. CISA found a public proof of concept authored by indoushka. CISA reports no known public exploitation targeting the vulnerability.

CISA AdvisoriesSep 29, 12:00 UTC · 17d agoVulnerability CVE-2026-227551

VIVOTEK

Timeline2 articles

Related CVEsby mentions

Appears with

The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws

VIVOTEK Camera Firmware