Digital Watchdog Va1g4 Recorder
5 CVEs affecting Digital Watchdog Va1g4 Recorder. Latest disclosed: 2026-09-15. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-66887 | Critical | 9.6 | 2026-09-15 | The affected products are missing authorization on state-changing CGIs and session checks are not performed. |
CVE-2026-68950 | High | 8.8 | 2026-09-15 | The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is… |
CVE-2026-68070 | High | 8.8 | 2026-09-15 | The affected products are missing authentication for a critical function, which could allow an attacker to run as root and pass received bytes directly to a sy… |
CVE-2026-66372 | Medium | 6.8 | 2026-09-15 | The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding token entropy to the seed space. |
CVE-2026-68953 | Medium | 6.5 | 2026-09-15 | The affected products are vulnerable to an authentication bypass that allows unauthenticated remote attackers to disclose sensitive device information, includi… |