PT-2026-45776

A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmware 0300a allows authenticated attackers to read any file on the device via sending a crafted request...

EUVD-2026-33970

A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmware 0300a allows authenticated attackers to read any file on the device via sending a crafted request...

CVE-2026-35718: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmware 0300a allows authenticated attackers to read any file on the device via sending a crafted request...

CVE-2026-35718

Summary: CVE-2026-35718 is a path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK FD8136-VVTK firmware 0300a. Affected component: firmware running on VIVOTEK FD8136-VVTK. Root cause: crafted requests allow traversal to read arbitrary files due to improper input handli...

VIVOTEK Network Cameras IB8369, FD8164 and FD816BA Arbitrary File Read Vulnerabilities

VIVOTEK Network Cameras IB8369, FD8164 and FD816BA are network camera products from VIVOTEK, China. A security vulnerability exists in the /cgi-bin/admin/downloadMedias.cgi file of the web server in VIVOTEK Network Cameras IB8369, FD8164 and FD816BA. An attacker can exploit this vulnerability by...

CVE-2017-9829: Improper Limitation of a Pathname to a Restricted Directory

'/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable, which allows remote attackers to read any file on the camera's Linux filesystem via a crafted HTTP request containing ".." sequences. This vulnerability is already verified on VIVOTEK...