Skip to content
OpenAdvisories

Vendor

CP-Plus

8 known vulnerabilities.

CP-Plus at a glance

Last 12 months
5
Critical · all time
0
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 2 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 2 vulnerabilities August 2026: 1 vulnerability September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202610
Jul 202620
Jun 202600
May 202620
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202510
Dec 202400

Products

EZ-P21 IP Camera 2 CP-XR-DE21-S Router 2 Wi-Fi Camera CP-E38Q, CP-E48Q, CP-E25Q, CP-E35Q, CP-E45Q, CP-E28Q, CP-E21Q, CP-E31Q, CP-E41Q, CP-E24Q, CP-Z43Q, CP-E34Q, CP-E44Q, CP-T31Q, CP-V48Q, CP-V41Q, CP-Z45Q 1 KVMS Pro 1 Wi-Fi Camera 1 CP-UNR-108F1 Hardware 1 CP-UNR-108F1 Web 1 CP-UNR-108F1 System 1

Latest advisories

  • High max 8.4
    ICSA-26-148-05 1 CVE

    CP Plus 8 Ch. Network Video Recorder

    Successful exploitation of this vulnerability allows an attacker's malicious script to execute in the browser of any authenticated user or administrator who accesses the affected interface. This could lead to compromise of user sessions, execution of unauthor…

    CP-Plus
  • High max 7.8
    ICSA-23-082-02 1 CVE

    CP Plus KVMS Pro

    Successful exploitation of this vulnerability could allow an attacker to retrieve sensitive credentials and control the entire CCTV system.

    CP-Plus
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • High 8.7
    CVE-2026-19412

    Hardcoded Credentials Vulnerability in CP Plus CP-XR-DE21-S Router

    This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication credentials in the firmware that are identical across all devices running the affected firmware. An attacker with access to the local netw…

    CP-Plus CP-XR-DE21-S Router
  • High 8.7
    CVE-2026-65894

    Improper Authentication Vulnerability in CP PLUS EZ-P21 IP Camera

    This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force attacks against HTTP endpoint on the targeted device. Successful exploitation …

    CP-Plus EZ-P21 IP Camera
  • High 7.0
    CVE-2026-65893 Public exploit

    Arbitrary Code Execution Vulnerability in CP PLUS EZ-P21 IP Camera

    This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with physical access could exploit this vulnerability by placing arbitrary code on removable media and triggering their execution throu…

    CP-Plus EZ-P21 IP Camera
  • High 8.4
    CVE-2026-6824

    CP Plus 8 Ch. Network Video Recorder Cross-site Scripting

    A stored cross-site scripting (XSS) vulnerability exists in certain 1xxx series NVR devices due to insufficient sanitization of user-supplied input in specific functional modules. Attackers can inject malicious scripts, which are then persistently stored on t…

    CP-Plus CP-UNR-108F1 Hardware CP-UNR-108F1 System CP-UNR-108F1 Web
  • Medium 5.2
    CVE-2026-9274

    Information Exposure Vulnerability in CP-Plus Wi-Fi Camera

    This vulnerability exists in CP Plus Wi-Fi Camera due to improper protection of sensitive information in runtime memory. An attacker with physical access could exploit this vulnerability by accessing the UART interface and performing memory extraction to obta…

    CP-Plus Wi-Fi Camera CP-E38Q, CP-E48Q, CP-E25Q, CP-E35Q, CP-E45Q, CP-E28Q, CP-E21Q, CP-E31Q, CP-E41Q, CP-E24Q, CP-Z43Q, CP-E34Q, CP-E44Q, CP-T31Q, CP-V48Q, CP-V41Q, CP-Z45Q
  • High 8.6
    CVE-2025-0479

    Security Misconfiguration Vulnerability in CP Plus Router

    This vulnerability exists in the CP Plus Router due to insecure handling of cookie flags used within its web interface. A remote attacker could exploit this vulnerability by intercepting data transmissions during an HTTP session on the vulnerable system. Succ…

    CP-Plus CP-XR-DE21-S Router
  • Medium 5.4
    CVE-2024-3434

    CP Plus Wi-Fi Camera User Management improper authorization

    A vulnerability classified as critical was found in CP Plus Wi-Fi Camera up to 20240401. Affected by this vulnerability is an unknown functionality of the component User Management. The manipulation leads to improper authorization. The attack can be launched …

    CP-Plus Wi-Fi Camera
  • High 7.8
    CVE-2023-1518

    CP Plus KVMS Pro versions 2.01.0.T.190521 and prior are vulnerable to sensitive credentials being leaked because they a…

    CP-Plus KVMS Pro