CVE-2026-35716

VIVOTEK FD8136 network cameras running firmware FD8136-VVTK-0300a are vulnerable to a stack-based buffer overflow in the motion_privacy.cgi binary. This vulnerability is triggered by an oversized n1 parameter in a POST request to the /cgi-bin/admin/setpm.cgi, /cgi-bin/admin/setmd.cgi, or /cgi-bin...

CVE-2026-30652

Affected product: Vivotek FD8136 cameras running firmware FD8136-VVTK-0300a. Vulnerable component: admin interface endpoint /cgi-bin/dido/setdo.cgi. Root cause: remote buffer overflow allowing an authenticated attacker to execute arbitrary code as root. Impact: high (remote code execution). Explo...