RCE in Vivotek Affected Device Model Numbers Are Fd8365, Fd8365v2, Fd9165, Fd9171, Fd9187, Fd9189, Fd9365, Fd9371, Fd9381, Fd9387, Fd9389, Fd9391,fe9180,fe9181, Fe9191, Fe9381, Fe9382, Fe9391, Fe9582, Ib9365, Ib93587lpr, Ib9371,ib9381, Ib9387, Ib9389, Ib939,ip9165,ip9171, Ip9172, Ip9181, Ip9191, It9389, Ma9321, Ma9322, Ms9321, Ms9390, Tb9330

CVE-2026-22755

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Vivotek Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.212 (97.3th percentile) — read the EPSS interpretation.

Affected products

Vivotek Affected Device Model Numbers Are Fd8365, Fd8365v2, Fd9165, Fd9171, Fd9187, Fd9189, Fd9365, Fd9371, Fd9381, Fd9387, Fd9389, Fd9391,fe9180,fe9181, Fe9191, Fe9381, Fe9382, Fe9391, Fe9582, Ib9365, Ib93587lpr, Ib9371,ib9381, Ib9387, Ib9389, Ib939,ip9165,ip9171, Ip9172, Ip9181, Ip9191, It9389, Ma9321, Ma9322, Ms9321, Ms9390, Tb9330 — versions 0100a, 0106a, 0106b

Weakness classification (CWE)

CWE-77 — Command Injection

Affected products

Weakness classification (CWE)

References