Vulnerabilities

TI-2026-57228 CVE-2026-82971 · GHSA-hgpv-7gcx-jgp2

QVidium Opera11 CGI Script net_tr.cgi command injection

HIGH 82

A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.03253 Published 2026-08-31 No fix listed CWE-74

TI-2025-39246 CVE-2025-63213 · GHSA-w8q2-24wh-63pr

The QVidium Opera11 device (firmware version 2.9.0-Ax4x-opera11) is vulnerable to Remote…

HIGH 82

The QVidium Opera11 device (firmware version 2.9.0-Ax4x-opera11) is vulnerable to Remote Code Execution (RCE) due to improper input validation on the /cgi-bin/net_ping.cgi endpoint.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00946 Published 2025-11-19 No fix listed CWE-20

TI-2022-18949 CVE-2022-40021 · GHSA-448m-g9xh-6q6v

QVidium Technologies Amino A140 (prior to firmware version 1.0.0-283) was discovered to…

MEDIUM 52

QVidium Technologies Amino A140 (prior to firmware version 1.0.0-283) was discovered to contain a command injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01381 Published 2023-02-17 No fix listed CWE-77

Vulnerabilities

Filters

QVidium Opera11 CGI Script net_tr.cgi command injection

The QVidium Opera11 device (firmware version 2.9.0-Ax4x-opera11) is vulnerable to Remote…

QVidium Technologies Amino A140 (prior to firmware version 1.0.0-283) was discovered to…