CVE-2026-66372: falha de alta gravidade em Digital Watchdog VA1G4 Recorder
Predictable Seed in Pseudo-Random Number Generator (PRNG) in Digital Watchdog VMAX DVR and NVR Product Lineups
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.6epss 0.3%
The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding token entropy to the seed space.
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Digital Watchdog · VA1G4 RecorderDigital Watchdog · VG4 RecorderDigital Watchdog · VMAX A1 G4 DVRDigital Watchdog · VMAX A1 PLUSDigital Watchdog · VMAX IP G4 NVRCVEs relacionadas — Digital Watchdog VA1G4 Recorder
No mesmo produto, das mais perigosas para as menos.
CVE-2026-68953HIGHMissing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product LineupsEPSS 0.6%CVE-2026-68070HIGHMissing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product LineupsEPSS 0.4%CVE-2026-68950HIGHUse of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product LineupsEPSS 0.3%CVE-2026-66887CRITICALMissing Authorization in Digital Watchdog VMAX DVR and NVR Product LineupsEPSS 0.3%CVE-2026-66890CRITICALUse of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product LineupsEPSS 0.3%