CVE-2026-35718

Summary: CVE-2026-35718 is a path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK FD8136-VVTK firmware 0300a. Affected component: firmware running on VIVOTEK FD8136-VVTK. Root cause: crafted requests allow traversal to read arbitrary files due to improper input handli...

CVE-2018-14495

CVE-2018-14495 concerns Vivotek FD8136 devices with a reported Remote Command Injection vulnerability. Connected sources (Red Hat CVEs RH:CVE-2018-14494 and RH:CVE-2018-14495) describe a related issue and indicate vendor disputes, noting that the vulnerability is contested and may not affect curr...

CVE-2018-14494

CVE-2018-14494 concerns Vivotek FD8136 devices and is described as a Remote Command Injection in evidence related to BusyBox and wget. The connected Red Hat and other entries reiterate this as a vulnerability affecting the FD8136, but the Red Hat notes also classify it as historical and not appli...

CVE-2018-14496

CVE-2018-14496 affects Vivotek FD8136 devices. The vulnerability is a stack-based buffer overflow in the web CGI endpoint “/set_getparam.cgi” related to the use of sprintf and a local buffer (vlocal_buff_4326), enabling remote memory corruption and remote code execution. Multiple sources corrobor...

CVE-2026-35717

The VIVOTEK FD8136 hemispherical network camera, specifically running firmware version FD8136-VVTK-0300a , is vulnerable to a stack-based buffer overflow in the export_language.cgi binary. An authenticated remote attacker can exploit this by sending a crafted POST request to the /cgi-bin/admin/ex...

CVE-2026-30652

Affected product: Vivotek FD8136 cameras running firmware FD8136-VVTK-0300a. Vulnerable component: admin interface endpoint /cgi-bin/dido/setdo.cgi. Root cause: remote buffer overflow allowing an authenticated attacker to execute arbitrary code as root. Impact: high (remote code execution). Explo...

CVE-2026-35716

VIVOTEK FD8136 network camera firmware version FD8136-VVTK-0300a is vulnerable to a stack-based buffer overflow in the motion_privacy.cgi binary. This flaw allows authenticated remote attackers to execute arbitrary code as root by sending an oversized n1 parameter in a POST request to the /cgi-bi...

CVE-2026-30649

A buffer overflow vulnerability exists in the VIVOTEK INC FD8136-VVTK-0300a super-mini fixed dome network camera firmware. The flaw is located within the set_getparam.cgi component, which can be exploited by a remote attacker to execute arbitrary code . While the root cause is identified as a buf...

CVE-2026-30650

A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface in Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a . The root cause involves a buffer copy without checking the size of the input, which allows a...