What is CVE-2026-66887?

CVE-2026-66887 is a critical-severity vulnerability in Digital Watchdog Va1g4 Recorder, classified under Missing Authorization. CVSS score: 9.6/10. Published 2026-09-15.

How severe is CVE-2026-66887?

Critical severity. CVSS v3 base score is 9.6 out of 10.

Auth bypass in Digital Watchdog Va1g4 Recorder

CVE-2026-66887

The affected products are missing authorization on state-changing CGIs and session checks are not performed.

Vulnerability class: Broken Access Control

CVSS v3 metric

CVSS v3 base score 9.6 (Critical). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Digital Watchdog Va1g4 Recorder
Digital Watchdog Vg4 Recorder
Digital Watchdog Vmax A1 G4 Dvr
Digital Watchdog Vmax A1 Plus
Digital Watchdog Vmax Ip G4 Nvr

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

ics-cert@hq.dhs.gov
ics-cert@hq.dhs.gov
ics-cert@hq.dhs.gov

Frequently asked questions

What is CVE-2026-66887?: CVE-2026-66887 is a critical-severity vulnerability in Digital Watchdog Va1g4 Recorder, classified under Missing Authorization. CVSS score: 9.6/10. Published 2026-09-15.
How severe is CVE-2026-66887?: Critical severity. CVSS v3 base score is 9.6 out of 10.