RCE in Vivotek Affected Device Model Numbers Are Fd8365, Fd8365v2, Fd9165, Fd9171, Fd9187, Fd9189, Fd9365, Fd9371, Fd9381, Fd9387, Fd9389, Fd9391,fe9180,fe9181, Fe9191, Fe9381, Fe9382, Fe9391, Fe9582, Ib9365, Ib93587lpr, Ib9371,ib9381, Ib9387, Ib9389, Ib939,ip9165,ip9171, Ip9172, Ip9181, Ip9191, It9389, Ma9321, Ma9322, Ms9321, Ms9390, Tb9330

CVE-2026-22755

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Vivotek Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330 (Firmware modules) allows OS Command Injection.This issue affects Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330: 0100a, 0106a, 0106b, 0107a, 0107b_1, 0109a, 0112a, 0113a, 0113d, 0117b, 0119e, 0120b, 0121, 0121d, 0121d_48573_1, 0122e, 0124d_48573_1, 012501, 012502, 0125c.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.212 (97.3th percentile) — read the EPSS interpretation.