Vulnerability Details CVE-2026-30650
A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an authenticated attacker to execute arbitrary code as root on the device remotely.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 25.3%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2026-30650
-
cpe:2.3:h:vivotek:fd8136:-
-
cpe:2.3:o:vivotek:fd8136_firmware:0300a