Skip to content
OpenAdvisories

Vendor

CP-Plus

8 known vulnerabilities.

Products

EZ-P21 IP Camera 2 CP-XR-DE21-S Router 2 Wi-Fi Camera CP-E38Q, CP-E48Q, CP-E25Q, CP-E35Q, CP-E45Q, CP-E28Q, CP-E21Q, CP-E31Q, CP-E41Q, CP-E24Q, CP-Z43Q, CP-E34Q, CP-E44Q, CP-T31Q, CP-V48Q, CP-V41Q, CP-Z45Q 1 KVMS Pro 1 Wi-Fi Camera 1 CP-UNR-108F1 Hardware 1 CP-UNR-108F1 Web 1 CP-UNR-108F1 System 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.7
    CVE-2026-19412

    Hardcoded Credentials Vulnerability in CP Plus CP-XR-DE21-S Router

    This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication credentials in the firmware that are identical across all devices running the affected firmware. An attacker with access to the local netw…

    CP-Plus CP-XR-DE21-S Router
  • High 8.7
    CVE-2026-65894

    Improper Authentication Vulnerability in CP PLUS EZ-P21 IP Camera

    This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force attacks against HTTP endpoint on the targeted device. Successful exploitation …

    CP-Plus EZ-P21 IP Camera
  • High 7.0
    CVE-2026-65893 Public exploit

    Arbitrary Code Execution Vulnerability in CP PLUS EZ-P21 IP Camera

    This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with physical access could exploit this vulnerability by placing arbitrary code on removable media and triggering their execution throu…

    CP-Plus EZ-P21 IP Camera
  • High 8.4
    CVE-2026-6824

    CP Plus 8 Ch. Network Video Recorder Cross-site Scripting

    A stored cross-site scripting (XSS) vulnerability exists in certain 1xxx series NVR devices due to insufficient sanitization of user-supplied input in specific functional modules. Attackers can inject malicious scripts, which are then persistently stored on t…

    CP-Plus CP-UNR-108F1 Hardware CP-UNR-108F1 System CP-UNR-108F1 Web
  • High 8.6
    CVE-2025-0479

    Security Misconfiguration Vulnerability in CP Plus Router

    This vulnerability exists in the CP Plus Router due to insecure handling of cookie flags used within its web interface. A remote attacker could exploit this vulnerability by intercepting data transmissions during an HTTP session on the vulnerable system. Succ…

    CP-Plus CP-XR-DE21-S Router
  • High 7.8
    CVE-2023-1518

    CP Plus KVMS Pro versions 2.01.0.T.190521 and prior are vulnerable to sensitive credentials being leaked because they a…

    CP-Plus KVMS Pro