Read the docs

VITEC

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

VITEC records in CISA KEV

No VITEC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Flamingo 2 records HIGH Avediastream M9305 Firmware 1 record MEDIUM Avediastream M9325 Firmware 1 record MEDIUM Avediastream M9400 Firmware 1 record MEDIUM Avediastream M9405 Firmware 1 record MEDIUM Avediastream M9605 Firmware 1 record MEDIUM Avediastream R9300 Firmware 1 record MEDIUM Avediastream R9310 Firmware 1 record MEDIUM

Records

2 records in Flamingo · all components

TI-2026-44079 CVE-2026-61498 · GHSA-h22f-f7h4-9589

Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via gen_graphs.php

Priority HIGH 81

Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/gen_graphs.php endpoint that allows remote unauthenticated attackers to execute arbitrary commands by supplying shell…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.04008 Published 2026-07-13 No fix listed CWE-78
TI-2026-42838 CVE-2026-60121 · GHSA-37rx-6hw8-mc8w

Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via ping.php

Priority HIGH 81

Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/ping.php endpoint that allows remote attackers to execute arbitrary commands by exploiting a double-evaluation flaw i…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03304 Published 2026-07-13 No fix listed CWE-78
Open these records in search →