CVE-2025-34130

An unauthenticated arbitrary file read vulnerability exists in LILIN Digital Video Recorder (DVR) devices running firmware versions prior to 2.0b60_20200207 . The flaw is reachable via the /z/zbin/net_html.cgi endpoint, allowing attackers to access sensitive configuration files like /zconf/servic...