A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an authenticated attacker to execute arbitrary code as root on the device remotely.
History

Tue, 02 Jun 2026 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Vivotek
Vivotek fd8136
Vendors & Products Vivotek
Vivotek fd8136

Tue, 02 Jun 2026 15:45:00 +0000

Type Values Removed Values Added
Description A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an authenticated attacker to execute arbitrary code as root on the device remotely.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-06-02T15:02:52.086Z

Reserved: 2026-03-04T00:00:00.000Z

Link: CVE-2026-30650

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-06-02T16:16:35.357

Modified: 2026-06-02T16:16:35.357

Link: CVE-2026-30650

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-02T16:30:13Z