CVE-2026-34005

In Sofia on Xiongmai DVR/NVR AHB7008T-MH-V2 and NBD7024H-P 4.03.R11 devices, root OS command injection can occur via shell metacharacters in the HostName value via an authenticated DVRIP protocol TCP port 34567 request to the NetWork.NetCommon configuration handler, because system is used...

Xiongmai DVR/NVR 操作系统命令注入漏洞

Xiongmai DVR/NVR is an embedded system and control platform developed by Xiongmai Corporation, used for video surveillance devices. Version 4.03.R11 of Xiongmai DVR/NVR contains a vulnerability related to operating system command injection. This vulnerability stems from the shell metacharacter in...