CVE-2026-68070: falha de alta gravidade em Digital Watchdog VA1G4 Recorder
Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product Lineups
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 0.4%
The affected products are missing authentication for a critical function, which could allow an attacker to run as root and pass received bytes directly to a system command.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Digital Watchdog · VA1G4 RecorderDigital Watchdog · VG4 RecorderDigital Watchdog · VMAX A1 G4 DVRDigital Watchdog · VMAX A1 PLUSDigital Watchdog · VMAX IP G4 NVRCVEs relacionadas — Digital Watchdog VA1G4 Recorder
No mesmo produto, das mais perigosas para as menos.
CVE-2026-68953HIGHMissing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product LineupsEPSS 0.6%CVE-2026-68950HIGHUse of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product LineupsEPSS 0.3%CVE-2026-66887CRITICALMissing Authorization in Digital Watchdog VMAX DVR and NVR Product LineupsEPSS 0.3%CVE-2026-66890CRITICALUse of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product LineupsEPSS 0.3%CVE-2026-66372HIGHPredictable Seed in Pseudo-Random Number Generator (PRNG) in Digital Watchdog VMAX DVR and NVR Product LineupsEPSS 0.3%