SSRF in Vestel Telefunken Te24553b45v2dz Smart Tv
CVE-2026-15570
An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefunken TE24553B45V2DZ Smart TV running on the Vestel MB181 / Voltron181 / TiVo OS platform allows an attacker with access to the sa…
Vulnerability class: SSRF (Server-Side Request Forgery)
Affected products
- Vestel Telefunken Te24553b45v2dz Smart Tv — versions V2.78.0.0, V2.85.2.0
Weakness classification (CWE)
References
- 5431be70-064b-4f6a-be51-69eacabef109 (vendor-advisory)
- 5431be70-064b-4f6a-be51-69eacabef109 (vendor-advisory)