Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-40624

AVer PTC cameras Files or Directories Accessible to External Parties

Description

Improper input validation in AVer PTC500S, PTC115, PTC500+, and PTC115+ cameras may allow a remote, unauthenticated attacker to achieve arbitrary code execution via a specially crafted web request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AVer PTC500S

Default version status: unaffected

  • *affected

AVer PTC115

Default version status: unaffected

  • *affected

AVer PTC500+

Default version status: unaffected

  • *affected

AVer PTC115+

Default version status: unaffected

  • *affected

References