VIVOTEK Camera Firmware

CRITICAL

CVSS 10.0

Date 2026-09-29T06:00:00+00:00

Source cisa-csaf

Published by CISA

// Description

Successful exploitation of this vulnerability may allow attackers to achieve remote command execution on affected devices, potentially with root privileges, leading to full compromise of the camera system.

// Vulnerabilities (1)

CVE ID	CVSS Score	Severity	Description
CVE-2026-22755	10.0	critical	A command injection vulnerability has been identified in firmware modules used by multiple network camera models from VIVOTEK.

// Remediations (1)

Mitigation: VIVOTEK has addressed this issue and encourages users to download and install the latest firmware av

VIVOTEK has addressed this issue and encourages users to download and install the latest firmware available.https://www.vivotek.com/en-US/resource/download-center/software-app-vadp-package

// References

CISA ICSA-26-272-03
CISA https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-272-03.json
CISA https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-03
CISA https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
CISA https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
CISA https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
CISA https://www.cisa.gov/topics/industrial-control-systems
CISA https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
CISA https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
CISA https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b
CISA https://www.cisa.gov/secure-our-world/teach-employees-avoid-phishing
CISA https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks