Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Vacron Clear all filters
TI-2026-14969 CVE-2026-18192 · GHSA-28gh-7mch-gmg8

Vacron｜IP Camera - Arbitrary File Read

Priority LOW 32

VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0057 Published 2026-07-29 No fix listed CWE-23
TI-2026-14968 CVE-2026-18191 · GHSA-fpc8-2xhq-9939

Vacron｜IP Camera - Hidden Functionality

Priority MEDIUM 49

VIN-DS783E-E6 developed by Vacron has a Hidden Functionality vulnerability, allowing unauthenticated remote attackers to exploit a specific hidden function to obtain the administrator credentials of the device.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00689 Published 2026-07-29 No fix listed CWE-912
TI-2025-07884 CVE-2025-8613 · GHSA-479m-726c-mvg5

OS command injection in Vacron Camera

Priority LOW 36

Vacron Camera ping Command Injection Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.0122 Published 2025-09-02 No fix listed CWE-78
TI-2025-24212 CVE-2025-34043 · GHSA-944p-p7rx-xv9r

Vacron NVR Remote Command Execution

Priority HIGH 82

A remote command injection vulnerability exists in Vacron Network Video Recorder (NVR) devices v1.4 due to improper input sanitization in the board.cgi script.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.07505 Published 2025-06-26 No fix listed CWE-20