CVE-2026-22755

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-22755", "assignerOrgId": "461b2335-328f-427d-ae3d-eff7d6814455", "state": "PUBLISHED", "assignerShortName": "larry_cashdollar", "dateReserved": "2026-01-09T14:27:11.646Z", "datePublished": "2026-01-13T15:12:53.126Z", "dateUpdated": "2026-01-20T20:33:02.780Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://ftpmirror.your.org/pub/misc/ftp.vivotek.com/Firmware/", "defaultStatus": "unaffected", "modules": ["Firmware"], "product": "Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330", "vendor": "Vivotek", "versions": [{"status": "affected", "version": "0100a", "versionType": "custom"}, {"status": "affected", "version": "0106a", "versionType": "custom"}, {"status": "affected", "version": "0106b", "versionType": "custom"}, {"status": "affected", "version": "0107a", "versionType": "custom"}, {"status": "affected", "version": "0107b_1", "versionType": "custom"}, {"status": "affected", "version": "0109a", "versionType": "custom"}, {"status": "affected", "version": "0112a", "versionType": "custom"}, {"status": "affected", "version": "0113a", "versionType": "custom"}, {"status": "affected", "version": "0113d", "versionType": "custom"}, {"status": "affected", "version": "0117b", "versionType": "custom"}, {"status": "affected", "version": "0119e", "versionType": "custom"}, {"status": "affected", "version": "0120b", "versionType": "custom"}, {"status": "affected", "version": "0121", "versionType": "custom"}, {"status": "affected", "version": "0121d", "versionType": "custom"}, {"status": "affected", "version": "0121d_48573_1", "versionType": "custom"}, {"status": "affected", "version": "0122e", "versionType": "custom"}, {"status": "affected", "version": "0124d_48573_1", "versionType": "custom"}, {"status": "affected", "version": "012501", "versionType": "custom"}, {"status": "affected", "version": "012502", "versionType": "custom"}, {"status": "affected", "version": "0125c", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Larry W. Cashdollar"}], "datePublic": "2026-01-08T17:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Vivotek Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330 (Firmware modules) allows OS Command Injection.<p>This issue affects Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330: 0100a, 0106a, 0106b, 0107a, 0107b_1, 0109a, 0112a, 0113a, 0113d, 0117b, 0119e, 0120b, 0121, 0121d, 0121d_48573_1, 0122e, 0124d_48573_1, 012501, 012502, 0125c.</p>"}], "value": "Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Vivotek Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330 (Firmware modules) allows OS Command Injection.This issue affects Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330: 0100a, 0106a, 0106b, 0107a, 0107b_1, 0109a, 0112a, 0113a, 0113d, 0117b, 0119e, 0120b, 0121, 0121d, 0121d_48573_1, 0122e, 0124d_48573_1, 012501, 012502, 0125c."}], "exploits": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Not public but easy to reproduce."}], "value": "Not public but easy to reproduce."}], "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 OS Command Injection"}]}], "metrics": [{"cvssV4_0": {"Automatable": "YES", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 9.3, "baseSeverity": "CRITICAL", "exploitMaturity": "PROOF_OF_CONCEPT", "privilegesRequired": "NONE", "providerUrgency": "AMBER", "subAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/AU:Y/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-77", "description": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "461b2335-328f-427d-ae3d-eff7d6814455", "shortName": "larry_cashdollar", "dateUpdated": "2026-01-20T20:33:02.780Z"}, "references": [{"url": "http://www.vapidlabs.com/advisory.php?v=220"}, {"url": "https://www.akamai.com/blog/security-research/command-injection-vivotek-legacy-firmware-need-to-know"}], "source": {"discovery": "UNKNOWN"}, "title": "Legacy Vivotek Camera Firmware Command Injection in upload_map.cgi", "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-13T15:29:25.879272Z", "id": "CVE-2026-22755", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-13T15:29:57.030Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-22755", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-13T15:29:25.879272Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-13T15:29:47.058Z"}}], "cna": {"title": "Legacy Vivotek Camera Firmware Command Injection in upload_map.cgi", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Larry W. Cashdollar"}], "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 OS Command Injection"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "YES", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/AU:Y/U:Amber", "exploitMaturity": "PROOF_OF_CONCEPT", "providerUrgency": "AMBER", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Vivotek", "modules": ["Firmware"], "product": "Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330", "versions": [{"status": "affected", "version": "0100a", "versionType": "custom"}, {"status": "affected", "version": "0106a", "versionType": "custom"}, {"status": "affected", "version": "0106b", "versionType": "custom"}, {"status": "affected", "version": "0107a", "versionType": "custom"}, {"status": "affected", "version": "0107b_1", "versionType": "custom"}, {"status": "affected", "version": "0109a", "versionType": "custom"}, {"status": "affected", "version": "0112a", "versionType": "custom"}, {"status": "affected", "version": "0113a", "versionType": "custom"}, {"status": "affected", "version": "0113d", "versionType": "custom"}, {"status": "affected", "version": "0117b", "versionType": "custom"}, {"status": "affected", "version": "0119e", "versionType": "custom"}, {"status": "affected", "version": "0120b", "versionType": "custom"}, {"status": "affected", "version": "0121", "versionType": "custom"}, {"status": "affected", "version": "0121d", "versionType": "custom"}, {"status": "affected", "version": "0121d_48573_1", "versionType": "custom"}, {"status": "affected", "version": "0122e", "versionType": "custom"}, {"status": "affected", "version": "0124d_48573_1", "versionType": "custom"}, {"status": "affected", "version": "012501", "versionType": "custom"}, {"status": "affected", "version": "012502", "versionType": "custom"}, {"status": "affected", "version": "0125c", "versionType": "custom"}], "collectionURL": "https://ftpmirror.your.org/pub/misc/ftp.vivotek.com/Firmware/", "defaultStatus": "unaffected"}], "exploits": [{"lang": "en", "value": "Not public but easy to reproduce.", "supportingMedia": [{"type": "text/html", "value": "Not public but easy to reproduce.", "base64": false}]}], "datePublic": "2026-01-08T17:00:00.000Z", "references": [{"url": "http://www.vapidlabs.com/advisory.php?v=220"}, {"url": "https://www.akamai.com/blog/security-research/command-injection-vivotek-legacy-firmware-need-to-know"}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Vivotek Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330 (Firmware modules) allows OS Command Injection.This issue affects Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330: 0100a, 0106a, 0106b, 0107a, 0107b_1, 0109a, 0112a, 0113a, 0113d, 0117b, 0119e, 0120b, 0121, 0121d, 0121d_48573_1, 0122e, 0124d_48573_1, 012501, 012502, 0125c.", "supportingMedia": [{"type": "text/html", "value": "Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Vivotek Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330 (Firmware modules) allows OS Command Injection.<p>This issue affects Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330: 0100a, 0106a, 0106b, 0107a, 0107b_1, 0109a, 0112a, 0113a, 0113d, 0117b, 0119e, 0120b, 0121, 0121d, 0121d_48573_1, 0122e, 0124d_48573_1, 012501, 012502, 0125c.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-77", "description": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')"}]}], "providerMetadata": {"orgId": "461b2335-328f-427d-ae3d-eff7d6814455", "shortName": "larry_cashdollar", "dateUpdated": "2026-01-20T20:33:02.780Z"}}}, "cveMetadata": {"cveId": "CVE-2026-22755", "state": "PUBLISHED", "dateUpdated": "2026-01-20T20:33:02.780Z", "dateReserved": "2026-01-09T14:27:11.646Z", "assignerOrgId": "461b2335-328f-427d-ae3d-eff7d6814455", "datePublished": "2026-01-13T15:12:53.126Z", "assignerShortName": "larry_cashdollar"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://ftpmirror.your.org/pub/misc/ftp.vivotek.com/Firmware/", "defaultStatus": "unaffected", "modules": ["Firmware"], "product": "Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330", "vendor": "Vivotek", "versions": [{"status": "affected", "version": "0100a", "versionType": "custom"}, {"status": "affected", "version": "0106a", "versionType": "custom"}, {"status": "affected", "version": "0106b", "versionType": "custom"}, {"status": "affected", "version": "0107a", "versionType": "custom"}, {"status": "affected", "version": "0107b_1", "versionType": "custom"}, {"status": "affected", "version": "0109a", "versionType": "custom"}, {"status": "affected", "version": "0112a", "versionType": "custom"}, {"status": "affected", "version": "0113a", "versionType": "custom"}, {"status": "affected", "version": "0113d", "versionType": "custom"}, {"status": "affected", "version": "0117b", "versionType": "custom"}, {"status": "affected", "version": "0119e", "versionType": "custom"}, {"status": "affected", "version": "0120b", "versionType": "custom"}, {"status": "affected", "version": "0121", "versionType": "custom"}, {"status": "affected", "version": "0121d", "versionType": "custom"}, {"status": "affected", "version": "0121d_48573_1", "versionType": "custom"}, {"status": "affected", "version": "0122e", "versionType": "custom"}, {"status": "affected", "version": "0124d_48573_1", "versionType": "custom"}, {"status": "affected", "version": "012501", "versionType": "custom"}, {"status": "affected", "version": "012502", "versionType": "custom"}, {"status": "affected", "version": "0125c", "versionType": "custom"}]}], "source": "larry0@me.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Vivotek Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330 (Firmware modules) allows OS Command Injection.This issue affects Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330: 0100a, 0106a, 0106b, 0107a, 0107b_1, 0109a, 0112a, 0113a, 0113d, 0117b, 0119e, 0120b, 0121, 0121d, 0121d_48573_1, 0122e, 0124d_48573_1, 012501, 012502, 0125c."}, {"lang": "es", "value": "Vulnerabilidad de Neutralizaci\u00f3n incorrecta de elementos especiales utilizados en un comando ('inyecci\u00f3n de comandos') en Vivotek. Los n\u00fameros de modelo de dispositivo afectados son FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330. (M\u00f3dulos de firmware) permite la inyecci\u00f3n de comandos del sistema operativo. Este problema afecta a los n\u00fameros de modelo de dispositivo afectados FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330: 0100a, 0106a, 0106b, 0107a, 0107b_1, 0109a, 0112a, 0113a, 0113d, 0117b, 0119e, 0120b, 0121, 0121d, 0121d_48573_1, 0122e, 0124d_48573_1, 012501, 012502, 0125c."}], "id": "CVE-2026-22755", "lastModified": "2026-06-17T10:20:22.553", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "YES", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "AMBER", "subAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "larry0@me.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-22755", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-01-13T15:29:25.879272Z", "version": "2.0.3"}}]}, "published": "2026-01-13T15:16:01.193", "references": [{"source": "larry0@me.com", "url": "http://www.vapidlabs.com/advisory.php?v=220"}, {"source": "larry0@me.com", "url": "https://www.akamai.com/blog/security-research/command-injection-vivotek-legacy-firmware-need-to-know"}], "sourceIdentifier": "larry0@me.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "larry0@me.com", "type": "Secondary"}]}

{}

{"created": "2026-01-14T11:08:45.115476+00:00", "updated": "2026-10-25T22:15:14.446283+00:00", "vendors": ["vivotek", "vivotek$PRODUCT$fd8365", "vivotek$PRODUCT$fd8365v2", "vivotek$PRODUCT$fd9165", "vivotek$PRODUCT$fd9171", "vivotek$PRODUCT$fd9187", "vivotek$PRODUCT$fd9189", "vivotek$PRODUCT$fd9365", "vivotek$PRODUCT$fd9371", "vivotek$PRODUCT$fd9381", "vivotek$PRODUCT$fd9387", "vivotek$PRODUCT$fd9389", "vivotek$PRODUCT$fd9391", "vivotek$PRODUCT$fe9180", "vivotek$PRODUCT$fe9181", "vivotek$PRODUCT$fe9191", "vivotek$PRODUCT$fe9381", "vivotek$PRODUCT$fe9382", "vivotek$PRODUCT$fe9391", "vivotek$PRODUCT$fe9582", "vivotek$PRODUCT$ib93587lpr", "vivotek$PRODUCT$ib9365", "vivotek$PRODUCT$ib9371", "vivotek$PRODUCT$ib9381", "vivotek$PRODUCT$ib9387", "vivotek$PRODUCT$ib9389", "vivotek$PRODUCT$ib939", "vivotek$PRODUCT$ip9165", "vivotek$PRODUCT$ip9171", "vivotek$PRODUCT$ip9172", "vivotek$PRODUCT$ip9181", "vivotek$PRODUCT$ip9191", "vivotek$PRODUCT$it9389", "vivotek$PRODUCT$ma9321", "vivotek$PRODUCT$ma9322", "vivotek$PRODUCT$ms9321", "vivotek$PRODUCT$ms9390", "vivotek$PRODUCT$tb9330"]}