Skip to content
OpenAdvisories

Vendor

Merit LILIN

5 known vulnerabilities.

Products

DVR Firmware 3 P2 1 P3 1 Z7 1 P6 1 V1 1 IPD 1 IPR 1 LD 1 LR 1 DH032 1 DVR708 1 DVR716 1 DVR804 1 DVR808 1 DVR816 1 NVR100L 1 NVR200L 1 NVR400L 1 NVR1400L 1 NVR2400L 1 NVR3216 1 NVR3416 1 NVR3416r 1 NVR3816 1 NVR5832 1 NVR5832S 1 NVR5104E 1 NVR5208E 1 NVR5416E 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2026-0855

    Merit LILIN｜IP Camera - OS Command Injection

    Certain IP Camera models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device.

    Merit LILIN LR P3 P6
  • High 8.8
    CVE-2026-0854

    Merit LILIN｜NVR - OS Command Injection

    Certain DVR/NVR models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device.

    Merit LILIN NVR3416r NVR100L NVR5832
  • High 8.7
    CVE-2025-34130

    LILIN DVR Arbitrary File Read via net_html.cgi

    An unauthenticated arbitrary file read exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 via the /z/zbin/net_html.cgi endpoint. This vulnerability allows attackers to read sensitive configuration files, such as /zc…

    Merit LILIN DVR Firmware
  • High 8.7
    CVE-2025-34129

    LILIN DVR RCE via Malicious FTP/NTP Configuration

    A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 due to insufficient sanitization of the FTP and NTP Server fields in the service configuration. An attacker with access to the con…

    Merit LILIN DVR Firmware