Threats tagged 'ghsa-fc56-2cmc-39gc'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-123993Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vulnerability where a QA build High8.72026-11-06GCVE DatabaseCVE-2026-123993 Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 includes a vulnerability due to an unauthenticated WebDriver automation server exposed on TCP port 4444. This server is part of a QA build of the Google Cobalt browser engine and is accessible without authentication from any LAN-adjacent attacker. Exploitation allows arbitrary JavaScript execution, data exfiltration, persistent display content injection, and filesystem and system-state operations via a native bridge. Report on CVE-2026-123993 Vulnerability CWE-306 #ghsa-fc56-2cmc-39gc	GCVE Database	2026-11-06

Page 1 of 1