CVE-2026-30650: n/a
A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an authenticated attacker to execute arbitrary code as root on the device remotely.
AI Analysis
Technical Summary
CVE-2026-30650 is a high-severity vulnerability affecting Vivotek FD8136 cameras with firmware FD8136-VVTK-0300a. It is a post-authentication remote buffer overflow in the /cgi-bin/admin/eventtask.cgi endpoint of the device's admin interface. Successful exploitation allows an attacker with valid credentials to execute arbitrary code as root remotely. The vulnerability is classified under CWE-120 (buffer overflow). There is no vendor advisory or patch information available at this time.
Potential Impact
An authenticated attacker can remotely execute arbitrary code with root privileges on the affected device. This can lead to full compromise of the camera, including control over device functions and potential pivoting within the network. The vulnerability has a CVSS v3.1 base score of 8.8, reflecting high impact on confidentiality, integrity, and availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict administrative access to trusted users only and monitor for suspicious activity. Do not expose the admin interface to untrusted networks.
CVE-2026-30650: n/a
Description
A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an authenticated attacker to execute arbitrary code as root on the device remotely.
CVSS v3.1
Score 8.8high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-30650 is a high-severity vulnerability affecting Vivotek FD8136 cameras with firmware FD8136-VVTK-0300a. It is a post-authentication remote buffer overflow in the /cgi-bin/admin/eventtask.cgi endpoint of the device's admin interface. Successful exploitation allows an attacker with valid credentials to execute arbitrary code as root remotely. The vulnerability is classified under CWE-120 (buffer overflow). There is no vendor advisory or patch information available at this time.
Potential Impact
An authenticated attacker can remotely execute arbitrary code with root privileges on the affected device. This can lead to full compromise of the camera, including control over device functions and potential pivoting within the network. The vulnerability has a CVSS v3.1 base score of 8.8, reflecting high impact on confidentiality, integrity, and availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict administrative access to trusted users only and monitor for suspicious activity. Do not expose the admin interface to untrusted networks.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2026-03-04T00:00:00.000Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a1efb62e29bf47b50db348e
Added to database: 06/02/2026, 15:48:50 UTC
Last enriched: 07/05/2026, 21:45:23 UTC
Last updated: 07/31/2026, 19:22:58 UTC
Views: 47
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.