Known Vulnerabilities for DVR/NVR Devices by Xiongmai
Listed below are 10 of the newest known vulnerabilities associated with "DVR/NVR Devices" by "Xiongmai".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-111855 json | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability exists in the web man... | Not Provided | 2026-10-17 | 2026-10-17 |
| CVE-2026-111854 json | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESyste... | Not Provided | 2026-10-17 | 2026-10-17 |
| CVE-2026-111853 json | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vulnerability exists in the ... | Not Provided | 2026-10-17 | 2026-10-17 |
| CVE-2026-111684 json | Magistrala through 1.0.0 contains an authorization bypass vulnerability that allows authenticated workspace members to view, ... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-111629 json | IoTSharp through 3.6.1 contains an insecure direct object reference vulnerability that allows any authenticated user to read ... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-111555 json | A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capable of supplying or modif... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-110124 json | FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authenticate... | Not Provided | 2026-10-13 | 2026-10-14 |
| CVE-2026-110110 json | JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access to ... | Not Provided | 2026-10-13 | 2026-10-13 |
| CVE-2026-109571 json | Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired BLE... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-109356 json | LibreNMS before 26.9.0 contains a missing authorization vulnerability in PortsController::purge that allows global-read users... | Not Provided | 2026-10-12 | 2026-10-12 |