VI
Vendor
Vivotek
179
CVEs
0
On KEV
0
New 30D
Products
CA9.8
Camera
Vivotek
10 CVEs0 on KEV0 new
FF9.8
Fd8136 Firmware
Vivotek
9 CVEs0 on KEV0 new
PF9.8
Pt7135 Firmware
Vivotek
5 CVEs0 on KEV0 new
CF9.8
Cc8160 Firmware
Vivotek
4 CVEs0 on KEV0 new
IP9.8
IP7137
Vivotek
4 CVEs0 on KEV0 new
IF9.8
Ip7137 Firmware
Vivotek
4 CVEs0 on KEV0 new
CC9.8
CC8160
Vivotek
2 CVEs0 on KEV0 new
CF8.8
Cc8160(hs) Firmware
Vivotek
2 CVEs0 on KEV0 new
CF8.8
Cc8370-hv Firmware
Vivotek
2 CVEs0 on KEV0 new
CF8.8
Cc8371-hv Firmware
Vivotek
2 CVEs0 on KEV0 new
CF8.8
Cc9381-hv Firmware
Vivotek
2 CVEs0 on KEV0 new
CF8.8
Cd8371-hntv Firmware
Vivotek
2 CVEs0 on KEV0 new
CF8.8
Cd8371-hnvf2 Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd8166a Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd8166a-n Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd8167a Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd8169a Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd816b-hf2 Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd816b-ht Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd816ba-hf2 Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd816ba-ht Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd816c-hf2 Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd816ca-hf2 Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd8182-f1 Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd8182-f2 Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd8182-t Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd8367a-v Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd8369a-v Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd836b-ehtv Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd836b-ehvf2 Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd836b-htv Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd836b-hvf2 Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd836ba-ehtv Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd836ba-ehvf2 Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd836ba-htv Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd836ba-hvf2 Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd8382-etv Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd8382-evf2 Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd9166-hn Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd9360-h Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd9366-hv Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd9368-htv Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd9380-h Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fd9388-htv Firmware
Vivotek
2 CVEs0 on KEV0 new
FF8.8
Fe9380-hv Firmware
Vivotek
2 CVEs0 on KEV0 new
IF8.8
Ib836b-ehf3 Firmware
Vivotek
2 CVEs0 on KEV0 new
IF8.8
Ib836b-eht Firmware
Vivotek
2 CVEs0 on KEV0 new
IF8.8
Ib836b-hf3 Firmware
Vivotek
2 CVEs0 on KEV0 new
IF8.8
Ib836b-hrf3 Firmware
Vivotek
2 CVEs0 on KEV0 new
IF8.8
Ib836b-ht Firmware
Vivotek
2 CVEs0 on KEV0 new
IF8.8
Ib836ba-ehf3 Firmware
Vivotek
2 CVEs0 on KEV0 new
IF8.8
Ib836ba-eht Firmware
Vivotek
2 CVEs0 on KEV0 new
IF8.8
Ib836ba-hf3 Firmware
Vivotek
2 CVEs0 on KEV0 new
IF8.8
Ib836ba-ht Firmware
Vivotek
2 CVEs0 on KEV0 new
IF8.8
Ib9360-h Firmware
Vivotek
2 CVEs0 on KEV0 new
IF8.8
Ib9368-ht Firmware
Vivotek
2 CVEs0 on KEV0 new
IF8.8
Ib9380-h Firmware
Vivotek
2 CVEs0 on KEV0 new
IF8.8
Ib9388-ht Firmware
Vivotek
2 CVEs0 on KEV0 new
IF8.8
It9360-h Firmware
Vivotek
2 CVEs0 on KEV0 new
IF8.8
It9380-h Firmware
Vivotek
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-30652 | FF Fd8136 Firmware Vivotek | 8.8 | Jun 2 | A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a |
| CVE-2026-35718 | FF Fd8136 Firmware Vivotek | 6.5 | Jun 2 | A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmware 0300a allows authenticated attackers to read any file on the device… |
| CVE-2026-35716 | FF Fd8136 Firmware Vivotek | 6.3 | Jun 2 | A stack-based buffer overflow in the motion_privacy.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root… |
| CVE-2026-35717 | FF Fd8136 Firmware Vivotek | 6.3 | Jun 2 | A stack-based buffer overflow in the export_language.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as… |
| CVE-2026-30650 | FF Fd8136 Firmware Vivotek | 8.8 | Jun 2 | A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware… |
| CVE-2026-30649 | FF Fd8136 Firmware Vivotek | 7.3 | Jun 2 | Buffer Overflow vulnerability in VIVOTEK INC FD8136-VVTK-0300a allows a remote attacker to execute arbitrary code via the set_getparam.cgi component |
| CVE-2026-22755 | AD Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA Vivotek | 9.3 | Jan 13 | Legacy Vivotek Camera Firmware Command Injection in upload_map.cgi |
| CVE-2025-66052 | IP IP7137 Vivotek | 7.2 | Jan 9 | Command injection in Vivotek IP7137 cameras |
| CVE-2025-66051 | IP IP7137 Vivotek | 6.5 | Jan 9 | Path traversal in Vivotek IP7137 cameras |
| CVE-2025-66050 | IP IP7137 Vivotek | 9.8 | Jan 9 | No password set for administrative account in Vivotek IP7137 cameras |
| CVE-2025-66049 | IP IP7137 Vivotek | 7.5 | Jan 9 | Unprotected RTSP stream in Vivotek IP7137 cameras |
| CVE-2025-12592 | AD Affected device model numbers are FD7131-VVTK,FD7131-VVTK,FD7131-VVTK,FD7141-VVTK,IP7131-VVTK,IP7133-VVTK,IP7133-VVTK,IP7133-VVTK,IP7134-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7138-VVTK,IP7142-VVTK,IP7142-VVTK,IP Vivotek | 9.3 | Nov 19 | Use of default login credentials in Legacy Vivotek Devices |
| CVE-2025-3403 | NN NVR ND9525P Vivotek | 2.7 | Apr 8 | Vivotek NVR ND8422P/NVR ND9525P/NVR ND9541P HTML Form sensitive information in source |
| CVE-2024-7443 | IB IB8367A Vivotek | 9.8 | Aug 3 | Vivotek IB8367A upload_file.cgi getenv command injection |
| CVE-2024-7442 | SD SD9364 Vivotek | 9.8 | Aug 3 | Vivotek SD9364 upload_file.cgi getenv command injection |
| CVE-2024-7441 | SD SD9364 Vivotek | 9.8 | Aug 3 | Vivotek SD9364 httpd read stack-based overflow |
| CVE-2024-7440 | CC CC8160 Vivotek | 9.8 | Aug 3 | Vivotek CC8160 upload_file.cgi getenv command injection |
| CVE-2024-7439 | CC CC8160 Vivotek | 9.8 | Aug 3 | Vivotek CC8160 httpd read stack-based overflow |
| CVE-2024-26548 | CF Camera Firmware Vivotek | 9.8 | Feb 29 | An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via a crafted payload to the upload_file.cgi component |
| CVE-2020-11950 | FF Fd8166a-n Firmware Vivotek | 8.8 | May 28 | VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to upload and execute a script (with resultant execution… |
| CVE-2020-11949 | FF Fd8369a-v Firmware Vivotek | 6.5 | May 28 | testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to obtain arbitrary… |
| CVE-2013-1598 | PF Pt7135 Firmware Vivotek | 8.8 | Jan 24 | A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to the farseer.out binary file, which cold let a malicious user… |
| CVE-2013-1597 | PF Pt7135 Firmware Vivotek | 6.5 | Jan 24 | A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET request, which could let a malicious user obtain user… |
| CVE-2013-1596 | PF Pt7135 Firmware Vivotek | 5.3 | Jan 24 | An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP packets to TCP port 554 |
| CVE-2013-1595 | PF Pt7135 Firmware Vivotek | 9.8 | Jan 24 | A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization header field sent to the RTSP service, which… |
| CVE-2013-1594 | PF Pt7135 Firmware Vivotek | 7.5 | Jan 24 | An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd party credentials stored in clear text |
| CVE-2013-4985 | IF Ip8332 Firmware Vivotek | 7.5 | Dec 27 | Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream |
| CVE-2019-14458 | CA Camera Vivotek | 7.5 | Sep 18 | VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP header |
| CVE-2019-10256 | CA Camera Vivotek | 9.8 | Sep 10 | An authentication bypass vulnerability in VIVOTEK IPCam versions prior to 0x13a was found |
| CVE-2019-14457 | CA Camera Vivotek | 9.8 | Sep 10 | VIVOTEK IP Camera devices with firmware before 0x20x have a stack-based buffer overflow via a crafted HTTP header |
| CVE-2018-14496 | FF Fd8136 Firmware Vivotek | 9.8 | Jul 10 | Vivotek FD8136 devices allow remote memory corruption and remote code execution because of a stack-based buffer overflow, related to sprintf, vlocal_buff_4326, and… |
| CVE-2018-14495 | FF Fd8136 Firmware Vivotek | 9.8 | Jul 10 | Vivotek FD8136 devices allow Remote Command Injection, aka "another command injection vulnerability in our target device," a different issue than CVE-2018-14494 |
| CVE-2018-14494 | FF Fd8136 Firmware Vivotek | 9.8 | Jul 10 | Vivotek FD8136 devices allow Remote Command Injection, related to BusyBox and wget |
| CVE-2018-18244 | CA Camera Vivotek | 6.1 | Jan 3 | Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript code via an HTTP… |
| CVE-2018-18005 | CA Camera Vivotek | 6.1 | Jan 3 | Cross-site scripting in event_script.js in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript via a URL… |
| CVE-2018-18004 | CA Camera Vivotek | 5.3 | Jan 3 | Incorrect Access Control in mod_inetd.cgi in VIVOTEK Network Camera Series products with firmware before XXXXXX-VVTK-0X09a allows remote attackers to enable arbitrary system… |
| CVE-2018-14771 | CA Camera Vivotek | 8.8 | Sep 5 | VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 2 of 2) via eventscript.cgi |
| CVE-2018-14770 | CA Camera Vivotek | 8.8 | Sep 5 | VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 1 of 2) via the ONVIF interface, (/onvif/device_service) |
| CVE-2018-14769 | CA Camera Vivotek | 8.8 | Sep 5 | VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF |
| CVE-2018-14768 | CA Camera Vivotek | 8.8 | Aug 29 | Various VIVOTEK FD8*, FD9*, FE9*, IB8*, IB9*, IP9*, IZ9*, MS9*, SD9*, and other devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code |
| CVE-2017-9829 | NC Network Camera Ib8369 Firmware Vivotek | 7.5 | Jun 23 | '/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable, which allows remote attackers to read any file on the camera's Linux… |
| CVE-2017-9828 | NC Network Camera Fd8164 Firmware Vivotek | 9.8 | Jun 23 | '/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which allows remote attackers to execute any… |
| CVE-2008-4771 | RM Rtsp Mpeg4 SP Control Vivotek | – | Oct 28 | Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in (1) 4xem VatCtrl Class (VATDecoder.dll 1.0.0.27 and 1.0.0.51), (2) D-Link MPEG4 SHM Audio Control… |
| CVE-2007-3167 | MJ Mjpegcontrol Vivotek | – | Jun 11 | Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control (aka MjpegControl) in MjpegDecoder.dll 2.0.0.13 allows remote attackers to execute arbitrary code via a long… |
