PT-2026-93117 · Digital Watchdog · Va1G4 Recorder+4

·

CVE-2026-66887

·

Published

2026-09-15

·

Updated

2026-09-16

CVSS v3.1

9.6

Critical

VectorAV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)
Description The software fails to perform session checks and lacks authorization on state-changing CGIs (Common Gateway Interfaces), which are scripts used to interface external factors with HTTP servers.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-66887

Affected Products

Va1G4 Recorder
Vg4 Recorder
Vmax A1 G4 Dvr
Vmax A1 Plus
Vmax Ip G4 Nvr