JVC VN-T IP-camera models firmware versions up to 2016-08-22 (confirmed on the VN-T216VPRU model) contain a directory traversal vulnerability in the checkcgi endpoint that accepts a user-controlled file parameter.
CVSS 4.0HIGH 8.7·Network·No auth·No interaction·EPSS 0.01007·Published 2025-11-12·Fixed in 2016-08-22CWE-22
