Skip to content
Threat Feed
Subscribe

Vendor

Hisense

2 briefs RSS
high advisory

Hisense VIDAA Smart TV authentication bypass (CVE-2026-123998)

Hisense VIDAA Smart TV firmware version V0000.01.00a.P0220 contains an authentication bypass in the MQTT broker on TCP port 36669, allowing unauthorized remote control via brute force or unauthenticated commands.

VIDAA Smart TV firmware
2t 1c
high advisory

Hisense VIDAA Smart TV firmware: Unauthenticated WebDriver access (CVE-2026-123993)

Hisense VIDAA Smart TV firmware version V0000.01.00a.P0220 exposes an unauthenticated WebDriver server on TCP port 4444, enabling local network attackers to execute arbitrary JavaScript and perform system-level operations via the native bridge.

VIDAA Smart TV firmware
2t 1c