Medium severity · published Oct 20, 2026
CVE-2026-100737
Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd
4.9
CVSS
0.3%
EPSS
No
On KEV
Description
Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized firmware.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
ADX1004 · Atsumi Electric Co., Ltd.
all versions · source: vendor
AD
ADX1008 · Atsumi Electric Co., Ltd.
all versions · source: vendor
AD
ADX2016 · Atsumi Electric Co., Ltd.
all versions · source: vendor
AD
ADX204 · Atsumi Electric Co., Ltd.
before Ver.10.8.237 · source: vendor
AD
ADX3004 · Atsumi Electric Co., Ltd.
before Ver.10.8.237 · source: vendor
AD
ADX3008 · Atsumi Electric Co., Ltd.
before Ver.10.8.237 · source: vendor
AD
ADX3016 · Atsumi Electric Co., Ltd.
before Ver.10.8.237 · source: vendor
AD
ADX404 · Atsumi Electric Co., Ltd.
before Ver.10.8.237 · source: vendor
AD
ADX5004 · Atsumi Electric Co., Ltd.
before Ver.10.8.237 · source: vendor
AD
ADX5008 · Atsumi Electric Co., Ltd.
before Ver.10.8.237 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-100737
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-100737
jvn.jp
https://jvn.jp/en/jp/JVN88864366/
www.atsumi.co.jp
https://www.atsumi.co.jp/info-20261005.html
More from ADX1004
7.2
CVE-2026-97627
Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd