Skip to content
OpenAdvisories
Critical · 9.6 CVE-2026-66890 EUVD-2026-79947GHSA-49rh-f5gr-c32x

Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups

Published Sep 15, 2026 · Updated Sep 16, 2026 · Assigned by icscert

Vendor: Digital Watchdog Product: VA1G4 Recorder Product: VG4 Recorder Product: VMAX A1 G4 DVR Product: VMAX A1 PLUS Product: VMAX IP G4 NVR

Description

The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable.

Affected products

VendorProductAffectedFixed
Digital Watchdog VMAX A1 G4 DVR All —
Digital Watchdog VMAX IP G4 NVR All —
Digital Watchdog VMAX A1 PLUS All —
Digital Watchdog VA1G4 Recorder All —
Digital Watchdog VG4 Recorder All —

Advisories 1

References