{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/vivotek/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:o:vivotek:camera_firmware:*:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2026-22755"}],"_cs_exploited":true,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["VIVOTEK Camera Firmware"],"_cs_severities":["critical"],"_cs_tags":["vulnerability","ics","cve-2026-22755","remote-access"],"_cs_type":"threat","_cs_vendors":["VIVOTEK"],"content_html":"\u003cp\u003eVIVOTEK has disclosed a critical command injection vulnerability (CVE-2026-22755) affecting a wide range of its network camera models. This vulnerability allows an unauthenticated, remote attacker to execute arbitrary commands on the affected devices. Due to the nature of the vulnerability, execution occurs with root-level privileges, resulting in the potential for a full compromise of the camera system.\u003c/p\u003e\n\u003cp\u003eThe vulnerability is classified as CWE-77 (Improper Neutralization of Special Elements used in a Command) and has been assigned a CVSS v3.1 score of 10.0 (Critical). The flaw exists in the firmware modules of the impacted hardware. While there are no confirmed reports of in-the-wild exploitation at the time of disclosure, a proof-of-concept exploit exists in the public domain. Security teams should prioritize patching or isolating these devices, as compromised cameras can be leveraged for network reconnaissance, unauthorized surveillance, or as entry points into wider organizational networks.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation leads to a complete loss of confidentiality, integrity, and availability of the affected VIVOTEK camera devices. As these systems are frequently deployed across critical infrastructure sectors including government, transportation, energy, and financial services, the impact includes unauthorized access to video streams, potential pivot points into internal industrial control system (ICS) networks, and the ability to brick or disrupt critical monitoring infrastructure. Affected devices are deployed worldwide.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003ePrioritize the following actions to secure VIVOTEK assets:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eImmediately identify all deployed VIVOTEK camera models listed in the affected products section.\u003c/li\u003e\n\u003cli\u003eDownload and install the latest firmware updates provided by VIVOTEK through their official download center.\u003c/li\u003e\n\u003cli\u003eImplement network segmentation to isolate all VIVOTEK cameras from internet-facing environments.\u003c/li\u003e\n\u003cli\u003eEnsure all control system devices are protected by firewalls, preventing direct access from the public internet or untrusted business network segments.\u003c/li\u003e\n\u003cli\u003eIf remote access is required, enforce the use of secure, authenticated VPN tunnels rather than direct port forwarding or web-accessible management interfaces.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-09-29T16:25:01Z","date_published":"2026-09-29T16:25:01Z","id":"https://feed.craftedsignal.io/briefs/2026-09-vivotek-firmware-rce/","summary":"A critical command injection vulnerability (CVE-2026-22755) in various VIVOTEK network camera firmware allows unauthenticated remote attackers to execute arbitrary commands with root privileges.","title":"Command Injection Vulnerability in VIVOTEK Camera Firmware","url":"https://feed.craftedsignal.io/briefs/2026-09-vivotek-firmware-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - VIVOTEK","version":"https://jsonfeed.org/version/1.1"}