Vulnerability-Lookup

ICSA-26-272-03

Vulnerability from csaf_cisa - Published: 2026-09-29 06:00 - Updated: 2026-09-29 06:00

Summary

VIVOTEK Camera Firmware

Notes

Legal Notice and Terms of Use: This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).

Advisory Summary: Successful exploitation of this vulnerability may allow attackers to achieve remote command execution on affected devices, potentially with root privileges, leading to full compromise of the camera system.

Critical infrastructure sectors: Government Services and Facilities, Transportation Systems, Commercial Facilities, Energy, Critical Manufacturing, Financial Services

Countries/areas deployed: Worldwide

Company headquarters location: Taiwan

Recommended Practices: CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolating them from business networks. When remote access is required, use more secure methods, such as virtual private networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.

Recommended Practices: CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.

Recommended Practices: CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.

Recommended Practices: CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.

Recommended Practices: Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.

Recommended Practices: Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.

Recommended Practices: No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.

CVE-2026-22755

10.0 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

Affected products

Known affected 37 products

Product	Version	Remediation
VIVOTEK V Series: model_FD9187 VIVOTEK / V Series	model_FD9187	Mitigation fix
VIVOTEK V Series: model_FD9189 VIVOTEK / V Series	model_FD9189	Mitigation fix
VIVOTEK V Series: model_FD9365 VIVOTEK / V Series	model_FD9365	Mitigation fix
VIVOTEK V Series: model_FD9387 VIVOTEK / V Series	model_FD9387	Mitigation fix
VIVOTEK V Series: model_FD9389 VIVOTEK / V Series	model_FD9389	Mitigation fix
VIVOTEK V Series: model_FD9391 VIVOTEK / V Series	model_FD9391	Mitigation fix
VIVOTEK C Series: model_FE9180 VIVOTEK / C Series	model_FE9180	Mitigation fix
VIVOTEK V Series: model_FE9191 VIVOTEK / V Series	model_FE9191	Mitigation fix
VIVOTEK V Series: model_FE9382 VIVOTEK / V Series	model_FE9382	Mitigation fix
VIVOTEK V Series: model_FE9391 VIVOTEK / V Series	model_FE9391	Mitigation fix
VIVOTEK V Series: model_IB9365 VIVOTEK / V Series	model_IB9365	Mitigation fix
VIVOTEK V Series: model_IB9387 VIVOTEK / V Series	model_IB9387	Mitigation fix
VIVOTEK V Series: model_IB9389 VIVOTEK / V Series	model_IB9389	Mitigation fix
VIVOTEK V Series: model_IB939 VIVOTEK / V Series	model_IB939	Mitigation fix
VIVOTEK V Series: model_IP9165 VIVOTEK / V Series	model_IP9165	Mitigation fix
VIVOTEK V Series: model_IP9171 VIVOTEK / V Series	model_IP9171	Mitigation fix
VIVOTEK S Series: model_IP9172 VIVOTEK / S Series	model_IP9172	Mitigation fix
VIVOTEK V Series: model_IP9181 VIVOTEK / V Series	model_IP9181	Mitigation fix
VIVOTEK V Series: model_IP9191 VIVOTEK / V Series	model_IP9191	Mitigation fix
VIVOTEK V Series: model_IT9389 VIVOTEK / V Series	model_IT9389	Mitigation fix
VIVOTEK V Series: model_MA9321 VIVOTEK / V Series	model_MA9321	Mitigation fix
VIVOTEK V Series: model_MA9322 VIVOTEK / V Series	model_MA9322	Mitigation fix
VIVOTEK S Series: model_MS9321 VIVOTEK / S Series	model_MS9321	Mitigation fix
VIVOTEK V Series: model_MS9390 VIVOTEK / V Series	model_MS9390	Mitigation fix
VIVOTEK S Series: model_TB9330 VIVOTEK / S Series	model_TB9330	Mitigation fix
VIVOTEK Dome: model_FD8365 VIVOTEK / Dome	model_FD8365	Mitigation fix
VIVOTEK Dome: model_FD8365v2 VIVOTEK / Dome	model_FD8365v2	Mitigation fix
VIVOTEK Dome: model_FD9165 VIVOTEK / Dome	model_FD9165	Mitigation fix
VIVOTEK Dome: model_FD9171 VIVOTEK / Dome	model_FD9171	Mitigation fix
VIVOTEK Dome: model_FD9371 VIVOTEK / Dome	model_FD9371	Mitigation fix
VIVOTEK Dome: model_FD9381 VIVOTEK / Dome	model_FD9381	Mitigation fix
VIVOTEK Panoramic: model_FE9181 VIVOTEK / Panoramic	model_FE9181	Mitigation fix
VIVOTEK Panoramic: model_FE9381 VIVOTEK / Panoramic	model_FE9381	Mitigation fix
VIVOTEK VIVOTEK Camera: model_FE9582 VIVOTEK / VIVOTEK Camera	model_FE9582	Mitigation fix
VIVOTEK VIVOTEK Camera: model_IB93587LPR VIVOTEK / VIVOTEK Camera	model_IB93587LPR	Mitigation fix
VIVOTEK Bullet: model_IB9371 VIVOTEK / Bullet	model_IB9371	Mitigation fix
VIVOTEK Bullet: model_IB9381 VIVOTEK / Bullet	model_IB9381	Mitigation fix

References

15 references

URL	Category
https://raw.githubusercontent.com/cisagov/CSAF/de…	self
https://www.cisa.gov/news-events/ics-advisories/i…	self
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-…	external
https://www.cisa.gov/resources-tools/resources/ic…	external
https://www.cisa.gov/sites/default/files/publicat…	external
https://www.cisa.gov/topics/industrial-control-systems	external
https://www.cisa.gov/news-events/ics-alerts/ics-a…	external
https://www.cisa.gov/sites/default/files/recommen…	external
https://www.cisa.gov/news-events/news/targeted-cy…	external
https://www.cisa.gov/secure-our-world/teach-emplo…	external
https://www.cisa.gov/news-events/news/avoiding-so…	external
https://cwe.mitre.org/data/definitions/77.html	external
https://www.cve.org/CVERecord?id=CVE-2026-22755	external
https://www.first.org/cvss/calculator/3.1#CVSS:3.…	external
https://www.first.org/cvss/calculator/4.0#CVSS:4.…	external

Acknowledgments

CISA

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "organization": "CISA",
        "summary": "discovered a public proof of concept as authored by indoushka and reported it to VIVOTEK"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.cisa.gov/news-events/news/traffic-light-protocol-tlp-definitions-and-usage"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy \u0026 Use policy (https://www.cisa.gov/privacy-policy).",
        "title": "Legal Notice and Terms of Use"
      },
      {
        "category": "summary",
        "text": "Successful exploitation of this vulnerability may allow attackers to achieve remote command execution on affected devices, potentially with root privileges, leading to full compromise of the camera system.",
        "title": "Advisory Summary"
      },
      {
        "category": "other",
        "text": "Government Services and Facilities, Transportation Systems, Commercial Facilities, Energy, Critical Manufacturing, Financial Services",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "Taiwan",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolating them from business networks. When remote access is required, use more secure methods, such as virtual private networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.",
        "title": "Recommended Practices"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "central@cisa.dhs.gov",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-26-272-03 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-272-03.json"
      },
      {
        "category": "self",
        "summary": "ICSA Advisory ICSA-26-272-03 - Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-03"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/topics/industrial-control-systems"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/secure-our-world/teach-employees-avoid-phishing"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks"
      }
    ],
    "title": "VIVOTEK Camera Firmware",
    "tracking": {
      "current_release_date": "2026-09-29T06:00:00.000000Z",
      "generator": {
        "date": "2026-09-28T15:14:08.366990Z",
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-26-272-03",
      "initial_release_date": "2026-09-29T06:00:00.000000Z",
      "revision_history": [
        {
          "date": "2026-09-29T06:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "Initial Publication"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_FD9187",
                "product": {
                  "name": "VIVOTEK V Series: model_FD9187",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "V Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_FD9189",
                "product": {
                  "name": "VIVOTEK V Series: model_FD9189",
                  "product_id": "CSAFPID-0002"
                }
              }
            ],
            "category": "product_name",
            "name": "V Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_FD9365",
                "product": {
                  "name": "VIVOTEK V Series: model_FD9365",
                  "product_id": "CSAFPID-0003"
                }
              }
            ],
            "category": "product_name",
            "name": "V Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_FD9387",
                "product": {
                  "name": "VIVOTEK V Series: model_FD9387",
                  "product_id": "CSAFPID-0004"
                }
              }
            ],
            "category": "product_name",
            "name": "V Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_FD9389",
                "product": {
                  "name": "VIVOTEK V Series: model_FD9389",
                  "product_id": "CSAFPID-0005"
                }
              }
            ],
            "category": "product_name",
            "name": "V Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_FD9391",
                "product": {
                  "name": "VIVOTEK V Series: model_FD9391",
                  "product_id": "CSAFPID-0006"
                }
              }
            ],
            "category": "product_name",
            "name": "V Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_FE9180",
                "product": {
                  "name": "VIVOTEK C Series: model_FE9180",
                  "product_id": "CSAFPID-0007"
                }
              }
            ],
            "category": "product_name",
            "name": "C Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_FE9191",
                "product": {
                  "name": "VIVOTEK V Series: model_FE9191",
                  "product_id": "CSAFPID-0008"
                }
              }
            ],
            "category": "product_name",
            "name": "V Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_FE9382",
                "product": {
                  "name": "VIVOTEK V Series: model_FE9382",
                  "product_id": "CSAFPID-0009"
                }
              }
            ],
            "category": "product_name",
            "name": "V Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_FE9391",
                "product": {
                  "name": "VIVOTEK V Series: model_FE9391",
                  "product_id": "CSAFPID-0010"
                }
              }
            ],
            "category": "product_name",
            "name": "V Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_IB9365",
                "product": {
                  "name": "VIVOTEK V Series: model_IB9365",
                  "product_id": "CSAFPID-0011"
                }
              }
            ],
            "category": "product_name",
            "name": "V Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_IB9387",
                "product": {
                  "name": "VIVOTEK V Series: model_IB9387",
                  "product_id": "CSAFPID-0012"
                }
              }
            ],
            "category": "product_name",
            "name": "V Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_IB9389",
                "product": {
                  "name": "VIVOTEK V Series: model_IB9389",
                  "product_id": "CSAFPID-0013"
                }
              }
            ],
            "category": "product_name",
            "name": "V Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_IB939",
                "product": {
                  "name": "VIVOTEK V Series: model_IB939",
                  "product_id": "CSAFPID-0014"
                }
              }
            ],
            "category": "product_name",
            "name": "V Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_IP9165",
                "product": {
                  "name": "VIVOTEK V Series: model_IP9165",
                  "product_id": "CSAFPID-0015"
                }
              }
            ],
            "category": "product_name",
            "name": "V Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_IP9171",
                "product": {
                  "name": "VIVOTEK V Series: model_IP9171",
                  "product_id": "CSAFPID-0016"
                }
              }
            ],
            "category": "product_name",
            "name": "V Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_IP9172",
                "product": {
                  "name": "VIVOTEK S Series: model_IP9172",
                  "product_id": "CSAFPID-0017"
                }
              }
            ],
            "category": "product_name",
            "name": "S Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_IP9181",
                "product": {
                  "name": "VIVOTEK V Series: model_IP9181",
                  "product_id": "CSAFPID-0018"
                }
              }
            ],
            "category": "product_name",
            "name": "V Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_IP9191",
                "product": {
                  "name": "VIVOTEK V Series: model_IP9191",
                  "product_id": "CSAFPID-0019"
                }
              }
            ],
            "category": "product_name",
            "name": "V Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_IT9389",
                "product": {
                  "name": "VIVOTEK V Series: model_IT9389",
                  "product_id": "CSAFPID-0020"
                }
              }
            ],
            "category": "product_name",
            "name": "V Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_MA9321",
                "product": {
                  "name": "VIVOTEK V Series: model_MA9321",
                  "product_id": "CSAFPID-0021"
                }
              }
            ],
            "category": "product_name",
            "name": "V Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_MA9322",
                "product": {
                  "name": "VIVOTEK V Series: model_MA9322",
                  "product_id": "CSAFPID-0022"
                }
              }
            ],
            "category": "product_name",
            "name": "V Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_MS9321",
                "product": {
                  "name": "VIVOTEK S Series: model_MS9321",
                  "product_id": "CSAFPID-0023"
                }
              }
            ],
            "category": "product_name",
            "name": "S Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_MS9390",
                "product": {
                  "name": "VIVOTEK V Series: model_MS9390",
                  "product_id": "CSAFPID-0024"
                }
              }
            ],
            "category": "product_name",
            "name": "V Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_TB9330",
                "product": {
                  "name": "VIVOTEK S Series: model_TB9330",
                  "product_id": "CSAFPID-0025"
                }
              }
            ],
            "category": "product_name",
            "name": "S Series"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_FD8365",
                "product": {
                  "name": "VIVOTEK Dome: model_FD8365",
                  "product_id": "CSAFPID-0026"
                }
              }
            ],
            "category": "product_name",
            "name": "Dome"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_FD8365v2",
                "product": {
                  "name": "VIVOTEK Dome: model_FD8365v2",
                  "product_id": "CSAFPID-0027"
                }
              }
            ],
            "category": "product_name",
            "name": "Dome"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_FD9165",
                "product": {
                  "name": "VIVOTEK Dome: model_FD9165",
                  "product_id": "CSAFPID-0028"
                }
              }
            ],
            "category": "product_name",
            "name": "Dome"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_FD9171",
                "product": {
                  "name": "VIVOTEK Dome: model_FD9171",
                  "product_id": "CSAFPID-0029"
                }
              }
            ],
            "category": "product_name",
            "name": "Dome"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_FD9371",
                "product": {
                  "name": "VIVOTEK Dome: model_FD9371",
                  "product_id": "CSAFPID-0030"
                }
              }
            ],
            "category": "product_name",
            "name": "Dome"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_FD9381",
                "product": {
                  "name": "VIVOTEK Dome: model_FD9381",
                  "product_id": "CSAFPID-0031"
                }
              }
            ],
            "category": "product_name",
            "name": "Dome"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_FE9181",
                "product": {
                  "name": "VIVOTEK Panoramic: model_FE9181",
                  "product_id": "CSAFPID-0032"
                }
              }
            ],
            "category": "product_name",
            "name": "Panoramic"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_FE9381",
                "product": {
                  "name": "VIVOTEK Panoramic: model_FE9381",
                  "product_id": "CSAFPID-0033"
                }
              }
            ],
            "category": "product_name",
            "name": "Panoramic"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_FE9582",
                "product": {
                  "name": "VIVOTEK VIVOTEK Camera: model_FE9582",
                  "product_id": "CSAFPID-0034"
                }
              }
            ],
            "category": "product_name",
            "name": "VIVOTEK Camera"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_IB93587LPR",
                "product": {
                  "name": "VIVOTEK VIVOTEK Camera: model_IB93587LPR",
                  "product_id": "CSAFPID-0035"
                }
              }
            ],
            "category": "product_name",
            "name": "VIVOTEK Camera"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_IB9371",
                "product": {
                  "name": "VIVOTEK Bullet: model_IB9371",
                  "product_id": "CSAFPID-0036"
                }
              }
            ],
            "category": "product_name",
            "name": "Bullet"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "model_IB9381",
                "product": {
                  "name": "VIVOTEK Bullet: model_IB9381",
                  "product_id": "CSAFPID-0037"
                }
              }
            ],
            "category": "product_name",
            "name": "Bullet"
          }
        ],
        "category": "vendor",
        "name": "VIVOTEK"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-22755",
      "cwe": {
        "id": "CWE-77",
        "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A command injection vulnerability has been identified in firmware modules used by multiple network camera models from VIVOTEK. ",
          "title": "Vulnerability Summary"
        },
        {
          "category": "details",
          "text": "SSVCv2/E:P/A:N/2026-09-28T06:00:00.000000Z",
          "title": "SSVC"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006",
          "CSAFPID-0007",
          "CSAFPID-0008",
          "CSAFPID-0009",
          "CSAFPID-0010",
          "CSAFPID-0011",
          "CSAFPID-0012",
          "CSAFPID-0013",
          "CSAFPID-0014",
          "CSAFPID-0015",
          "CSAFPID-0016",
          "CSAFPID-0017",
          "CSAFPID-0018",
          "CSAFPID-0019",
          "CSAFPID-0020",
          "CSAFPID-0021",
          "CSAFPID-0022",
          "CSAFPID-0023",
          "CSAFPID-0024",
          "CSAFPID-0025",
          "CSAFPID-0026",
          "CSAFPID-0027",
          "CSAFPID-0028",
          "CSAFPID-0029",
          "CSAFPID-0030",
          "CSAFPID-0031",
          "CSAFPID-0032",
          "CSAFPID-0033",
          "CSAFPID-0034",
          "CSAFPID-0035",
          "CSAFPID-0036",
          "CSAFPID-0037"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "cwe.mitre.org",
          "url": "https://cwe.mitre.org/data/definitions/77.html"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-22755"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "VIVOTEK has addressed this issue and encourages users to download and install the latest firmware available.https://www.vivotek.com/en-US/resource/download-center/software-app-vadp-package",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0019",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023",
            "CSAFPID-0024",
            "CSAFPID-0025",
            "CSAFPID-0026",
            "CSAFPID-0027",
            "CSAFPID-0028",
            "CSAFPID-0029",
            "CSAFPID-0030",
            "CSAFPID-0031",
            "CSAFPID-0032",
            "CSAFPID-0033",
            "CSAFPID-0034",
            "CSAFPID-0035",
            "CSAFPID-0036",
            "CSAFPID-0037"
          ],
          "url": "https://www.vivotek.com/en-US/resource/download-center/software-app-vadp-package"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 10.0,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0019",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023",
            "CSAFPID-0024",
            "CSAFPID-0025",
            "CSAFPID-0026",
            "CSAFPID-0027",
            "CSAFPID-0028",
            "CSAFPID-0029",
            "CSAFPID-0030",
            "CSAFPID-0031",
            "CSAFPID-0032",
            "CSAFPID-0033",
            "CSAFPID-0034",
            "CSAFPID-0035",
            "CSAFPID-0036",
            "CSAFPID-0037"
          ]
        }
      ]
    }
  ]
}

CVE-2026-22755 (GCVE-0-2026-22755)

Vulnerability from cvelistv5 – Published: 2026-01-13 15:12 – Updated: 2026-01-20 20:33

Title

Legacy Vivotek Camera Firmware Command Injection in upload_map.cgi

Summary

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Vivotek Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330 (Firmware modules) allows OS Command Injection.This issue affects Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330: 0100a, 0106a, 0106b, 0107a, 0107b_1, 0109a, 0112a, 0113a, 0113d, 0117b, 0119e, 0120b, 0121, 0121d, 0121d_48573_1, 0122e, 0124d_48573_1, 012501, 012502, 0125c.

Severity

9.3 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/AU:Y/U:Amber

SSVC

Exploitation: poc Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-01-13 15:29 UTC

CWE

CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

Assigner

larry_cashdollar mitre root Scorecard

References

2 references

URL	Tags
http://www.vapidlabs.com/advisory.php?v=220
https://www.akamai.com/blog/security-research/com…

Impacted products

1 product

Vendor	Product	Version
Vivotek	Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330	Affected: 0100a (custom) Affected: 0106a (custom) Affected: 0106b (custom) Affected: 0107a (custom) Affected: 0107b_1 (custom) Affected: 0109a (custom) Affected: 0112a (custom) Affected: 0113a (custom) Affected: 0113d (custom) Affected: 0117b (custom) Affected: 0119e (custom) Affected: 0120b (custom) Affected: 0121 (custom) Affected: 0121d (custom) Affected: 0121d_48573_1 (custom) Affected: 0122e (custom) Affected: 0124d_48573_1 (custom) Affected: 012501 (custom) Affected: 012502 (custom) Affected: 0125c (custom)

Date Public

2026-01-08 17:00

Credits

Larry W. Cashdollar

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-22755",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-13T15:29:25.879272Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-13T15:29:57.030Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://ftpmirror.your.org/pub/misc/ftp.vivotek.com/Firmware/",
          "defaultStatus": "unaffected",
          "modules": [
            "Firmware"
          ],
          "product": "Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330",
          "vendor": "Vivotek",
          "versions": [
            {
              "status": "affected",
              "version": "0100a",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0106a",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0106b",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0107a",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0107b_1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0109a",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0112a",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0113a",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0113d",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0117b",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0119e",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0120b",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0121",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0121d",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0121d_48573_1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0122e",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0124d_48573_1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "012501",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "012502",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "0125c",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Larry W. Cashdollar"
        }
      ],
      "datePublic": "2026-01-08T17:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027) vulnerability in Vivotek Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330 (Firmware modules) allows OS Command Injection.\u003cp\u003eThis issue affects Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330: 0100a, 0106a, 0106b, 0107a, 0107b_1, 0109a, 0112a, 0113a, 0113d, 0117b, 0119e, 0120b, 0121, 0121d, 0121d_48573_1, 0122e, 0124d_48573_1, 012501, 012502, 0125c.\u003c/p\u003e"
            }
          ],
          "value": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027) vulnerability in Vivotek Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330 (Firmware modules) allows OS Command Injection.This issue affects Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330: 0100a, 0106a, 0106b, 0107a, 0107b_1, 0109a, 0112a, 0113a, 0113d, 0117b, 0119e, 0120b, 0121, 0121d, 0121d_48573_1, 0122e, 0124d_48573_1, 012501, 012502, 0125c."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Not public but easy to reproduce."
            }
          ],
          "value": "Not public but easy to reproduce."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-88",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-88 OS Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "YES",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "PROOF_OF_CONCEPT",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/AU:Y/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-77",
              "description": "CWE-77 Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-01-20T20:33:02.780Z",
        "orgId": "461b2335-328f-427d-ae3d-eff7d6814455",
        "shortName": "larry_cashdollar"
      },
      "references": [
        {
          "url": "http://www.vapidlabs.com/advisory.php?v=220"
        },
        {
          "url": "https://www.akamai.com/blog/security-research/command-injection-vivotek-legacy-firmware-need-to-know"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Legacy Vivotek Camera Firmware Command Injection in upload_map.cgi",
      "x_generator": {
        "engine": "Vulnogram 0.5.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "461b2335-328f-427d-ae3d-eff7d6814455",
    "assignerShortName": "larry_cashdollar",
    "cveId": "CVE-2026-22755",
    "datePublished": "2026-01-13T15:12:53.126Z",
    "dateReserved": "2026-01-09T14:27:11.646Z",
    "dateUpdated": "2026-01-20T20:33:02.780Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

ICSA-26-272-03

CVE-2026-22755 (GCVE-0-2026-22755)

Tags

Sightings

Nomenclature

Related by attack behaviour