EUVD-2026-118425

Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an input validation vulnerability in the UPnP/DLNA AVTransport SOAP service that allows a LAN-adjacent attacker to inject arbitrary URIs via the CurrentURI field of SetAVTransportURI without validating the scheme, host, or media...

CVE-2026-123995

Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 is vulnerable to an input validation vulnerability in the UPnP/DLNA AVTransport SOAP service . A LAN-adjacent attacker can inject arbitrary URIs through the CurrentURI field of SetAVTransportURI because the system fails to validate the scheme, ho...