CVE-2026-123993: high-severity vulnerability in Hisense VIDAA
Hisense VIDAA Smart TV Unauthenticated WebDriver Remote Access
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
18Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7
Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vulnerability where a QA build of the Google Cobalt browser engine exposes the WebDriver automation server on TCP port 4444 across all network interfaces without any authentication or pairing requirement. A LAN-adjacent attacker can connect to the exposed WebDriver service to execute arbitrary JavaScript, read and exfiltrate sensitive localStorage data including ACR telemetry, MAC addresses, ad-service credentials, and location data, inject persistent content onto the display, and access the window.hisense native bridge to perform filesystem read/write and system-state operations.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Hisense · VIDAARelated CVEs — Hisense VIDAA
In the same product, most dangerous first.
CVE-2026-123998HIGHHisense VIDAA Smart TV MQTT Broker Authentication BypassEPSS —CVE-2026-123997HIGHHisense VIDAA Smart TV Unauthenticated DoS via SetAVTransportURIEPSS —CVE-2026-123996MEDIUMHisense VIDAA Smart TV UPnP/DLNA Missing AuthenticationEPSS —CVE-2026-123995MEDIUMHisense VIDAA Smart TV SSRF via SetAVTransportURI CurrentURIEPSS —CVE-2026-123994MEDIUMHisense VIDAA Smart TV DIAL Service Unauthenticated AccessEPSS —