CVE-2026-30652 - A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a

Back Back to CVE browser

HIGH

A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a

Published Jun 2, 2026

8.8

HIGH

CVSS 3.1

EPSS 0.76%

Description

A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an authenticated attacker to execute arbitrary code as root on the device.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33968
Advisory
https://github.com/xchg-rax-rax/vulnerability-research/tree/main/CVE-2026-30652
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33968		Advisory
https://github.com/xchg-rax-rax/vulnerability-research/tree/main/CVE-2026-30652		Third Party Advisory