Vulnerability Details CVE-2026-30652
A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an authenticated attacker to execute arbitrary code as root on the device.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 16.8%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2026-30652
-
cpe:2.3:h:vivotek:fd8136:-
-
cpe:2.3:o:vivotek:fd8136_firmware:0300a