CVE-2026-68950: fallo de gravedad alta en Digital Watchdog VA1G4 Recorder
Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.7epss 0.3%
The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Digital Watchdog · VA1G4 RecorderDigital Watchdog · VG4 RecorderDigital Watchdog · VMAX A1 G4 DVRDigital Watchdog · VMAX A1 PLUSDigital Watchdog · VMAX IP G4 NVRCVEs relacionadas — Digital Watchdog VA1G4 Recorder
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-68953HIGHMissing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product LineupsEPSS 0.6%CVE-2026-68070HIGHMissing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product LineupsEPSS 0.4%CVE-2026-66887CRITICALMissing Authorization in Digital Watchdog VMAX DVR and NVR Product LineupsEPSS 0.3%CVE-2026-66890CRITICALUse of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product LineupsEPSS 0.3%CVE-2026-66372HIGHPredictable Seed in Pseudo-Random Number Generator (PRNG) in Digital Watchdog VMAX DVR and NVR Product LineupsEPSS 0.3%