What is CVE-2026-66372?

CVE-2026-66372 is a medium-severity vulnerability in Digital Watchdog Va1g4 Recorder, classified under CWE-337. CVSS score: 6.8/10. Published 2026-09-15.

How severe is CVE-2026-66372?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Vulnerability in Digital Watchdog Va1g4 Recorder

CVE-2026-66372

The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding token entropy to the seed space.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N.

Affected products

Digital Watchdog Va1g4 Recorder
Digital Watchdog Vg4 Recorder
Digital Watchdog Vmax A1 G4 Dvr
Digital Watchdog Vmax A1 Plus
Digital Watchdog Vmax Ip G4 Nvr

Weakness classification (CWE)

CWE-337

References

ics-cert@hq.dhs.gov
ics-cert@hq.dhs.gov
ics-cert@hq.dhs.gov

Frequently asked questions

What is CVE-2026-66372?: CVE-2026-66372 is a medium-severity vulnerability in Digital Watchdog Va1g4 Recorder, classified under CWE-337. CVSS score: 6.8/10. Published 2026-09-15.
How severe is CVE-2026-66372?: Medium severity. CVSS v3 base score is 6.8 out of 10.