Sale of a 0‑day vulnerability affecting several network video recorders (NVRs)

For informational purposes only

According to the seller, the NVR centrally stores or can utilize the credentials of connected cameras to manage them and access their video feeds.

Vulnerability type: pre‑auth RCE

A zero-day vulnerability enabling pre-authentication remote code execution is for sale, affecting multiple network video recorders storing connected camera credentials to access video feeds.