CVE-2026-20894

Cross-site scripting vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation. If an attacking administrator configures the affected product with some malicious input, an arbitrary script may be executed on the web browser of a victim administrator who accesse...

CVE-2026-20894

Cross-site scripting vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation. If an attacking administrator configures the affected product with some malicious input, an arbitrary script may be executed on the web browser of a victim administrator who accesse...

CVE-2026-20894

CVE-2026-20894 affects TOA Corporation’s Network Cameras TRIFORA 3 series. The vulnerability is a Cross-site scripting (CWE-79) in the web interface, triggered when an attacking administrator submits malicious input on the setting screen. A logged-in user with high privileges can cause a victim a...

CVE-2026-20759

OS Command Injection vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation, which may allow a logged-in user with the low"monitoring user" or higher privilege to execute an arbitrary OS command...

CVE-2026-20759

OS Command Injection vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation, which may allow a logged-in user with the low"monitoring user" or higher privilege to execute an arbitrary OS command...

CVE-2026-20759

CVE-2026-20759 concerns TOA Network Cameras TRIFORA 3 series and describes an OS Command Injection (CWE-78). The issue allows a logged-in user with low privileges (monitoring user) or higher to execute arbitrary OS commands on the device. Documents consistently list the affected component as the ...

CVE-2026-20759

OS Command Injection vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation, which may allow a logged-in user with the low"monitoring user" or higher privilege to execute an arbitrary OS command...

Multiple Vulnerabilities in TOA Network Cameras TRIFORA 3 series

Overview Network Cameras TRIFORA 3 series provided by TOA Corporation contain multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2026-20759 Cross-site scripting CWE-79 - CVE-2026-20894 Path traversal CWE-22 - CVE-2026-22876 Shogo Iyota of GMO Cybersecurity by Ierae reported...

TOA TRIFORA 3 Series Cross-site Scripting Vulnerabilities

The TOA TRIFORA 3 Series is a series of network cameras produced by the Japanese company TOA. The TOA TRIFORA 3 Series has a cross-site scripting vulnerability, which allows for the execution of arbitrary scripts in the victim’s browser...

TP-Link VIGI Series security vulnerabilities

The TP-Link VIGI Series is a series of surveillance cameras produced by TP-Link Corporation. The TP-Link VIGI Series contains security vulnerabilities, specifically an authentication bypass in the password recovery function. This vulnerability could allow attackers to reset administrator password...

PT-2026-3239

Cross-site scripting vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation. If an attacking administrator configures the affected product with some malicious input, an arbitrary script may be executed on the web browser of a victim administrator who accesse...

PT-2026-3240

Path Traversal vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation. If this vulnerability is exploited, arbitrary files on the affected product may be retrieved by a logged-in user with the low"monitoring user" or higher privilege...

PT-2026-3238

OS Command Injection vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation, which may allow a logged-in user with the low"monitoring user" or higher privilege to execute an arbitrary OS command...

PT-2026-3270

Name of the Vulnerable Software and Affected Versions TP-Link VIGI Cameras affected versions not specified Description An authentication bypass issue exists in the password recovery feature of the local web interface of TP-Link VIGI cameras. This allows an attacker on the Local Area Network LAN t...

TOA TRIFORA 3 Series Operating System Command Injection Vulnerability

The TOA TRIFORA 3 Series is a series of network cameras produced by the Japanese company TOA. The TOA TRIFORA 3 Series has a vulnerability related to operating system command injection. This vulnerability stems from a flaw in the operating system’s command injection mechanism, which may allow for...

CVE-2026-0855

Certain IP Camera models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device...

Vivotek多款产品 安全漏洞

Vivotek FD8365 and others are a camera from China's VIVOTEK Communications Vivotek. A security vulnerability exists in several Vivotek products, which originates from command injection. The following products and versions are affected: FD8365, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD938...

CVE-2026-0855

Certain IP Camera models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device...

CVE-2026-0855 Merit LILIN｜IP Camera - OS Command Injection

Certain IP Camera models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device...

CVE-2026-0855

Merit LILIN IP Camera models are affected by an OS Command Injection vulnerability. The CVE-2026-0855 entry describes an authenticated remote attacker able to inject and execute OS commands on the device. Connected sources (Red Hat, NVD, CVE.org, EUVD, CNNVD, etc.) confirm the flaw as OS command ...