Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-19412

Hardcoded Credentials Vulnerability in CP Plus CP-XR-DE21-S Router

This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication credentials in the firmware that are identical across all devices running the affected firmware. An attacker with access to the local network could exploit this vulnerability by obtaining the hardcoded authentication information from the firmware. Successful exploitation of this vulnerability could allow the attacker to gain unauthorized administrative access and perform privileged operations on the targeted device.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Cp Plus
Products
Cp-xr-de21-s Router
CVE-2026-6824

CP Plus 8 Ch. Network Video Recorder Cross-site Scripting

A stored cross-site scripting (XSS) vulnerability exists in certain 1xxx series NVR devices due to insufficient sanitization of user-supplied input in specific functional modules. Attackers can inject malicious scripts, which are then persistently stored on the device backend. When administrators or users access affected pages, the stored scripts are executed in their browsers, leading to potential session hijacking, unauthorized actions, or data theft.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Cp Plus
Products
Cp-unr-108f1 Hardware Cp-unr-108f1 System Cp-unr-108f1 Web
CVE-2026-9274

Information Exposure Vulnerability in CP-Plus Wi-Fi Camera

This vulnerability exists in CP Plus Wi-Fi Camera due to improper protection of sensitive information in runtime memory. An attacker with physical access could exploit this vulnerability by accessing the UART interface and performing memory extraction to obtain sensitive information, including cryptographic private keys, Wi-Fi credentials and configuration data stored in RAM of the targeted device. Successful exploitation of this vulnerability could allow unauthorized access to encrypted communications and connected wireless network of the targeted device.

CVSS 4.0 · 5.2 Medium EPSS < 1% KEV · Not listed
Vendors
Cp Plus
Products
Cp-e21q Cp-e24q Cp-e25q and 15 more