Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: CP Plus Clear all filters
TI-2026-15831 CVE-2026-19412 · GHSA-3h26-q4ch-cw3m

Hardcoded Credentials Vulnerability in CP Plus CP-XR-DE21-S Router

Priority LOW 39

This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication credentials in the firmware that are identical across all devices running the affected firmware.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.003 Published 2026-08-28 No fix listed CWE-798
TI-2026-05986 CVE-2026-6824 · GHSA-99qx-w46m-63ww

CP Plus 8 Ch. Network Video Recorder Cross-site Scripting

Priority LOW 39

A stored cross-site scripting (XSS) vulnerability exists in certain 1xxx series NVR devices due to insufficient sanitization of user-supplied input in specific functional modules.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00373 Published 2026-05-29 No fix listed CWE-79
TI-2026-08148 CVE-2026-9274 · GHSA-6c6p-vqc7-gj3w

Information Exposure Vulnerability in CP-Plus Wi-Fi Camera

Priority LOW 22

This vulnerability exists in CP Plus Wi-Fi Camera due to improper protection of sensitive information in runtime memory.

CVSS 4.0MEDIUM 5.2 Physical No auth No interaction EPSS 0.00125 Published 2026-05-25 No fix listed CWE-312
TI-2025-00396 CVE-2025-0479 · GHSA-wwpc-74vx-c2x3

Security Misconfiguration Vulnerability in CP Plus Router

Priority MEDIUM 40

This vulnerability exists in the CP Plus Router due to insecure handling of cookie flags used within its web interface.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00457 Published 2025-01-20 No fix listed CWE-1004