CVE-2025-10264

Certain models of NVR developed by Digiever has an Exposure of Sensitive Information vulnerability, allowing unauthenticated remoter attackers to access the system configuration file and obtain plaintext credentials of the NVR and its connected cameras.

Scoring

Severity

CRITICAL

CVSS base score

10

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

EPSS probability

0.48%

CWE

CWE-497

Published

2025-09-12

Last modified

2026-03-12

Affected products

• Digiever DS-1200
• Digiever DS-2100 Pro
• Digiever DS-2100 Pro+
• Digiever DS-2100 UHD
• Digiever DS-2200 UHD
• Digiever DS-2200 UHD+
• Digiever DS-4200 Pro
• Digiever DS-4200 Pro+

Weakness type

• CWE-497

Related vulnerabilities

• CVE-2026-61911 — An issue was discovered in Cyrus IMAP before 3.12.4. There is a Sieve mailbox existence oracle. An...
• CVE-2026-81394 — Microsoft Excel Information Disclosure Vulnerability
• CVE-2026-81387 — Microsoft Excel Information Disclosure Vulnerability
• CVE-2026-69315 — Windows License Manager Information Disclosure Vulnerability
• CVE-2026-68842 — Windows MIDI Service Module Information Disclosure Vulnerability
• CVE-2026-71330 — Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
• CVE-2026-69832 — Win32k Information Disclosure Vulnerability
• CVE-2026-69723 — Windows Kernel Information Disclosure Vulnerability

Markdown version · Browse all CVEs