Skip to content
OpenAdvisories
Critical · 9.6 CVE-2026-66887 EUVD-2026-79952GHSA-294r-hwg8-m55w

Missing Authorization in Digital Watchdog VMAX DVR and NVR Product Lineups

Published Sep 15, 2026 · Updated Sep 16, 2026 · Assigned by icscert

Vendor: Digital Watchdog Product: VA1G4 Recorder Product: VG4 Recorder Product: VMAX A1 G4 DVR Product: VMAX A1 PLUS Product: VMAX IP G4 NVR

Description

The affected products are missing authorization on state-changing CGIs and session checks are not performed.

Affected products

VendorProductAffectedFixed
Digital Watchdog VMAX A1 G4 DVR All —
Digital Watchdog VMAX IP G4 NVR All —
Digital Watchdog VMAX A1 PLUS All —
Digital Watchdog VA1G4 Recorder All —
Digital Watchdog VG4 Recorder All —

Advisories 1

References