Approved changes feed: RSS · Atom

cpe:2.3:a:digital_watchdog:va1g4_recorder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDigital Watchdog (03f68245-b6b0-59b0-8005-a565d0ca9855)
ProductVa1G4 Recorder (aa7c5f29-695a-5533-bd54-1884b56e5f5e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-68950 vulnerable 2026-09-16 04:34:00.059335 Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups
HIGH (8.8)
The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable.
Published: 2026-09-15T20:31:56.303Z
Updated: 2026-09-16T17:55:44.680Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-68070 vulnerable 2026-09-16 04:34:00.020101 Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product Lineups
HIGH (8.8)
The affected products are missing authentication for a critical function, which could allow an attacker to run as root and pass received bytes directly to a system command.
Published: 2026-09-15T20:28:27.109Z
Updated: 2026-09-16T17:55:13.474Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-68953 vulnerable 2026-09-16 04:33:59.624973 Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product Lineups
MEDIUM (6.5)
The affected products are vulnerable to an authentication bypass that allows unauthenticated remote attackers to disclose sensitive device information, including administrator credentials in plaintext, by sending crafted HTTP(S) requests.
Published: 2026-09-15T20:20:57.887Z
Updated: 2026-09-16T17:52:09.566Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-66890 vulnerable 2026-09-16 04:32:55.311299 Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups
CRITICAL (9.6)
The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable.
Published: 2026-09-15T20:25:09.383Z
Updated: 2026-09-16T17:54:33.751Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-66887 vulnerable 2026-09-16 04:32:55.083488 Missing Authorization in Digital Watchdog VMAX DVR and NVR Product Lineups
CRITICAL (9.6)
The affected products are missing authorization on state-changing CGIs and session checks are not performed.
Published: 2026-09-15T20:37:51.407Z
Updated: 2026-09-16T17:57:45.143Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-66372 vulnerable 2026-09-16 04:32:54.796392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.