{"vulnerability": "cve-2026-66887", "sightings": [{"uuid": "2f213f3c-1e9e-4c5e-ad83-2f78b711314b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-66887", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01", "content": "", "creation_timestamp": "2026-09-15T16:15:37.376236Z"}, {"uuid": "f2c2dcce-818e-42a7-ab31-5be19803f704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66887", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvlg623ip52o", "content": "~Cisa~\nCISA warns VMAX DVR/NVR flaws enable root access and surveillance compromise; update firmware.\n-\nIOCs: CVE-2026-66890, CVE-2026-66887, CVE-2026-68070\n-\n#CVE202666887 #CVE20266890 #ThreatIntel", "creation_timestamp": "2026-09-15T20:02:34.231814Z"}, {"uuid": "1aa854d5-82e9-489d-9989-94f6b7da2968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66887", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmn5dqgul2g", "content": "CVE-2026-66887 - vmax a1 g4 dvr\nSeveral Digital Watchdog VMAX DVR and NVR models do not verify who is making changes or whether a user\u2019s session is valid. This means an attacker who can reach the device could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#digitalwatchdog #CVE #infosec", "creation_timestamp": "2026-09-16T07:40:06.608968Z"}]}