CVE-2026-35718

Summary: CVE-2026-35718 is a path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK FD8136-VVTK firmware 0300a. Affected component: firmware running on VIVOTEK FD8136-VVTK. Root cause: crafted requests allow traversal to read arbitrary files due to improper input handli...

CVE-2018-14495

CVE-2018-14495 concerns Vivotek FD8136 devices with a reported Remote Command Injection vulnerability. Connected sources (Red Hat CVEs RH:CVE-2018-14494 and RH:CVE-2018-14495) describe a related issue and indicate vendor disputes, noting that the vulnerability is contested and may not affect curr...

CVE-2018-14494

CVE-2018-14494 concerns Vivotek FD8136 devices and is described as a Remote Command Injection in evidence related to BusyBox and wget. The connected Red Hat and other entries reiterate this as a vulnerability affecting the FD8136, but the Red Hat notes also classify it as historical and not appli...

CVE-2018-14496

CVE-2018-14496 affects Vivotek FD8136 devices. The vulnerability is a stack-based buffer overflow in the web CGI endpoint “/set_getparam.cgi” related to the use of sprintf and a local buffer (vlocal_buff_4326), enabling remote memory corruption and remote code execution. Multiple sources corrobor...

CVE-2026-35717

The VIVOTEK FD8136 network camera, specifically running firmware version FD8136-VVTK-0300a , is vulnerable to a stack-based buffer overflow in the export_language.cgi binary. An authenticated remote attacker can execute arbitrary code with root privileges by sending a crafted POST request to the ...

CVE-2026-30652

Affected product: Vivotek FD8136 cameras running firmware FD8136-VVTK-0300a. Vulnerable component: admin interface endpoint /cgi-bin/dido/setdo.cgi. Root cause: remote buffer overflow allowing an authenticated attacker to execute arbitrary code as root. Impact: high (remote code execution). Explo...

CVE-2026-35716

VIVOTEK FD8136 network cameras running firmware FD8136-VVTK-0300a are vulnerable to a stack-based buffer overflow in the motion_privacy.cgi binary. This vulnerability is triggered by an oversized n1 parameter in a POST request to the /cgi-bin/admin/setpm.cgi, /cgi-bin/admin/setmd.cgi, or /cgi-bin...

CVE-2026-30649

A buffer overflow vulnerability exists in the VIVOTEK INC FD8136-VVTK-0300a super-mini fixed dome network camera firmware. This flaw originates within the set_getparam.cgi component, where the application may write more data to a memory buffer than it is allocated to hold. A remote attacker can e...

CVE-2026-30650

Vivotek FD8136 hemispherical network cameras are vulnerable to a post-authentication remote buffer overflow in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface. This issue specifically affects devices running firmware version FD8136-VVTK-0300a . The root cause is a failure to prop...