Skip to content
OpenAdvisories
Medium · 6.8 CVE-2026-66372 EUVD-2026-79953GHSA-gq5q-45hh-68cr

Predictable Seed in Pseudo-Random Number Generator (PRNG) in Digital Watchdog VMAX DVR and NVR Product Lineups

Published Sep 15, 2026 · Updated Sep 17, 2026 · Assigned by icscert

Vendor: Digital Watchdog Product: VA1G4 Recorder Product: VG4 Recorder Product: VMAX A1 G4 DVR Product: VMAX A1 PLUS Product: VMAX IP G4 NVR

Description

The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding token entropy to the seed space.

Affected products

VendorProductAffectedFixed
Digital Watchdog VMAX A1 G4 DVR All —
Digital Watchdog VMAX IP G4 NVR All —
Digital Watchdog VMAX A1 PLUS All —
Digital Watchdog VA1G4 Recorder All —
Digital Watchdog VG4 Recorder All —

Advisories 1

References