Read the docs

CP Plus

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

CP Plus records in CISA KEV

No CP Plus vulnerabilities are listed in CISA KEV.

Records

7 records

TI-2025-00396 CVE-2025-0479 · GHSA-wwpc-74vx-c2x3

Security Misconfiguration Vulnerability in CP Plus Router

Priority MEDIUM 40

This vulnerability exists in the CP Plus Router due to insecure handling of cookie flags used within its web interface.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00457 Published 2025-01-20 No fix listed CWE-1004
TI-2026-15831 CVE-2026-19412 · GHSA-3h26-q4ch-cw3m

Hardcoded Credentials Vulnerability in CP Plus CP-XR-DE21-S Router

Priority LOW 39

This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication credentials in the firmware that are identical across all devices running the affected firmware.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.003 Published 2026-08-28 No fix listed CWE-798
TI-2026-05986 CVE-2026-6824 · GHSA-99qx-w46m-63ww

CP Plus 8 Ch. Network Video Recorder Cross-site Scripting

Priority LOW 39

A stored cross-site scripting (XSS) vulnerability exists in certain 1xxx series NVR devices due to insufficient sanitization of user-supplied input in specific functional modules.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00373 Published 2026-05-29 No fix listed CWE-79
TI-2026-08148 CVE-2026-9274 · GHSA-6c6p-vqc7-gj3w

Information Exposure Vulnerability in CP-Plus Wi-Fi Camera

Priority LOW 22

This vulnerability exists in CP Plus Wi-Fi Camera due to improper protection of sensitive information in runtime memory.

CVSS 4.0MEDIUM 5.2 Physical No auth No interaction EPSS 0.00125 Published 2026-05-25 No fix listed CWE-312
Open these records in search →