Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2026-66887

Missing Authorization in Digital Watchdog VMAX DVR and NVR Product Lineups

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The affected products are missing authorization on state-changing CGIs and session checks are not performed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Digital Watchdog VMAX A1 G4 DVR

Default version status: unaffected

  • Allaffected

Digital Watchdog VMAX IP G4 NVR

Default version status: unaffected

  • Allaffected

Digital Watchdog VMAX A1 PLUS

Default version status: unaffected

  • Allaffected

Digital Watchdog VA1G4 Recorder

Default version status: unaffected

  • Allaffected

Digital Watchdog VG4 Recorder

Default version status: unaffected

  • Allaffected

References