Vulnerability details
CVE-2026-68070
Digital Watchdog VA1G4 RecorderDigital Watchdog VG4 RecorderDigital Watchdog VMAX A1 G4 DVRDigital Watchdog VMAX A1 PLUSDigital Watchdog VMAX IP G4 NVR
Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product Lineups
CVSS 4.0
8.7High
Official description
The affected products are missing authentication for a critical function, which could allow an attacker to run as root and pass received bytes directly to a system command.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.7High | 4.0 | CVEProject cvelistV5 (CNA) (icscert) | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| 8.8High | 3.1 | CVEProject cvelistV5 (CNA) (icscert) | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Digital Watchdog | VA1G4 Recorder | All | CVEProject cvelistV5 (CNA) |
| Digital Watchdog | VG4 Recorder | All | CVEProject cvelistV5 (CNA) |
| Digital Watchdog | VMAX A1 G4 DVR | All | CVEProject cvelistV5 (CNA) |
| Digital Watchdog | VMAX A1 PLUS | All | CVEProject cvelistV5 (CNA) |
| Digital Watchdog | VMAX IP G4 NVR | All | CVEProject cvelistV5 (CNA) |
References and advisories
3
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-09-15
- Last updated
- 2026-09-16
- State
- Published
- Assigner (CNA)
- icscert
Exploit prediction (EPSS)
0.42%
Probability of exploitation in 30 days
37.1%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-306Missing authentication for critical function