Vivotek
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| IP7137 | 4 | – | Jan 9, 2026 |
| CC8160 | 2 | – | Aug 3, 2024 |
| SD9364 | 2 | – | Aug 3, 2024 |
| IB8367A | 1 | – | Aug 3, 2024 |
| Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB9358 | 1 | – | Jan 13, 2026 |
| NVR ND8422P | 1 | – | Apr 8, 2025 |
| NVR ND9525P | 1 | – | Apr 8, 2025 |
| NVR ND9541P | 1 | – | Apr 8, 2025 |
| Affected device model numbers are FD7131-VVTK,FD7131-VVTK,FD7131-VVTK,FD7141-VVTK,IP7131-VVTK,IP7133-VVTK,IP7133-VVTK,IP7133-VVTK,IP7134-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7137-VVT | 1 | – | Nov 19, 2025 |
Exploited and recent CVEs
- CVE-2026-22755 Legacy Vivotek Camera Firmware Command Injection in upload_map.cgi 13.8%
- CVE-2025-66052 Command injection in Vivotek IP7137 cameras 1.5%
- CVE-2025-66051 Path traversal in Vivotek IP7137 cameras 0.8%
- CVE-2025-66050 No password set for administrative account in Vivotek IP7137 cameras 0.4%
- CVE-2025-66049 Unprotected RTSP stream in Vivotek IP7137 cameras 0.4%
- CVE-2025-12592 Use of default login credentials in Legacy Vivotek Devices 0.4%
- CVE-2025-3403 Vivotek NVR ND8422P/NVR ND9525P/NVR ND9541P HTML Form sensitive information in source 0.4%
- CVE-2025-3403 Vivotek NVR ND8422P/NVR ND9525P/NVR ND9541P HTML Form sensitive information in source 0.4%
- CVE-2025-3403 Vivotek NVR ND8422P/NVR ND9525P/NVR ND9541P HTML Form sensitive information in source 0.4%
- CVE-2024-7443 Vivotek IB8367A upload_file.cgi getenv command injection 2.7%
- CVE-2024-7442 Vivotek SD9364 upload_file.cgi getenv command injection 2.7%
- CVE-2024-7441 Vivotek SD9364 httpd read stack-based overflow 8.1%
- CVE-2024-7440 Vivotek CC8160 upload_file.cgi getenv command injection 2.7%
- CVE-2024-7439 Vivotek CC8160 httpd read stack-based overflow 1.0%