113 matches found
DEBIAN-CVE-2026-89889
In the Linux kernel, the following vulnerability has been resolved: media: i2c: imx415: Release runtime PM reference on VBLANK error The VBLANK path returned immediately when programming VMAX failed after pmruntimegetifinuse had taken a runtime PM reference. Break out of the switch instead so the...
Linux Distros Unpatched Vulnerability : CVE-2026-89889
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: i2c: imx415: Release runtime PM reference on VBLANK error The VBLANK path returned immediately when programming VMAX failed after pmruntimegetifinuse had...
CVE-2026-66372
CVE-2026-66372 affects the Digital Watchdog VMAX DVR and NVR product lineups. The root cause is a predictable seed in the pseudo-random number generator (PRNG) , resulting in insufficiently random values that make web session tokens predictable and bound their entropy to the seed space. The CVSS ...
CVE-2026-66372 Predictable Seed in Pseudo-Random Number Generator (PRNG) in Digital Watchdog VMAX DVR and NVR Product Lineups
The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding token entropy to the seed space...
CVE-2026-66887
Digital Watchdog VMAX DVR and NVR devices are vulnerable due to missing authorization on state-changing CGI endpoints and the absence of session checks , allowing an attacker on the adjacent network to modify device state without authentication. CISA ICS-CERT rated this CRITICAL (CVSS 3.1: 9.6 / ...
CVE-2026-66887 Missing Authorization in Digital Watchdog VMAX DVR and NVR Product Lineups
The affected products are missing authorization on state-changing CGIs and session checks are not performed...
CVE-2026-66887 Missing Authorization in Digital Watchdog VMAX DVR and NVR Product Lineups
The affected products are missing authorization on state-changing CGIs and session checks are not performed...
CVE-2026-68950 Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups
The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable...
CVE-2026-68950 Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups
The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable...
CVE-2026-68950
CVE-2026-68950 affects Digital Watchdog VMAX DVR and NVR product lineups. The root cause is hard-coded credentials , which allow an attacker to run the ftpd service as root , granting remote root file access where FTP is reachable. The vulnerability is rated HIGH severity (CVSS 3.1: 8.8, CVSS 4.0...
CVE-2026-68070
Digital Watchdog VMAX DVR and NVR product lineups are affected by a missing authentication flaw for a critical function, allowing an adjacent-network attacker—requiring no privileges—to execute code as root by passing received bytes directly to a system command (command injection). CISA rates it ...
CVE-2026-68070 Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product Lineups
The affected products are missing authentication for a critical function, which could allow an attacker to run as root and pass received bytes directly to a system command...
CVE-2026-68070 Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product Lineups
The affected products are missing authentication for a critical function, which could allow an attacker to run as root and pass received bytes directly to a system command...
CVE-2026-66890 Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups
The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable...
CVE-2026-66890
Digital Watchdog VMAX DVR and NVR devices are affected by a hard-coded credentials vulnerability that allows an attacker with adjacent-network access to gain remote file access with root privileges when the device's FTP service is reachable. The CISA-assigned CVSS 3.1 score is 9.6 (CRITICAL) , wi...
CVE-2026-66890 Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups
The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable...
CVE-2026-68953
CVE-2026-68953 is a missing authentication for critical function vulnerability affecting the Digital Watchdog VMAX DVR and NVR product lineups. Unauthenticated attackers on an adjacent network can send crafted HTTP(S) requests to bypass authentication and disclose sensitive device information, in...
CVE-2026-68953 Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product Lineups
The affected products are vulnerable to an authentication bypass that allows unauthenticated remote attackers to disclose sensitive device information, including administrator credentials in plaintext, by sending crafted HTTPS requests...
CVE-2026-68953 Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product Lineups
The affected products are vulnerable to an authentication bypass that allows unauthenticated remote attackers to disclose sensitive device information, including administrator credentials in plaintext, by sending crafted HTTPS requests...
