Lucene search
K

CVE-2026-34005

🗓️ 29 Mar 2026 17:02:15Reported by mitreType 
cvelist
 cvelist
🔗 www.cve.org👁 18 Views

DVRIP request on Sofia Xiongmai devices allows root OS command injection via HostName chars.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2026-34005
29 Mar 202617:02
attackerkb
Circl
CVE-2026-34005
26 Mar 202615:00
circl
CNNVD
Xiongmai DVR/NVR 操作系统命令注入漏洞
29 Mar 202600:00
cnnvd
CVE
CVE-2026-34005
29 Mar 202617:02
cve
EUVD
EUVD-2026-17041
29 Mar 202618:30
euvd
NVD
CVE-2026-34005
29 Mar 202617:16
nvd
Positive Technologies
PT-2026-28591
29 Mar 202600:00
ptsecurity
RedhatCVE
CVE-2026-34005
30 Mar 202617:06
redhatcve
Vulnrichment
CVE-2026-34005
29 Mar 202617:02
vulnrichment
[
  {
    "defaultStatus": "unknown",
    "modules": [
      "Sofia binary - hostname configuration handler"
    ],
    "product": "DVR/NVR devices",
    "vendor": "Xiongmai",
    "versions": [
      {
        "status": "affected",
        "version": "4.03.R11",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

29 Mar 2026 17:09Current
CVSS 3.18.8
EPSS0.00109
18