CVE-2026-66890
The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.6
- CVSS vector
- CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
- EPSS probability
- 0.20%
- CWE
- CWE-798
- Published
- 2026-09-15
- Last modified
- 2026-09-16
Affected products
- Digital Watchdog VMAX A1 G4 DVR
- Digital Watchdog VMAX IP G4 NVR
- Digital Watchdog VMAX A1 PLUS
- Digital Watchdog VA1G4 Recorder
- Digital Watchdog VG4 Recorder
Weakness type
Related vulnerabilities
- CVE-2026-22769 — Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. Thi
- CVE-2026-27507 — Binardat 10G08-0800GSM Network Switch Hard-coded Credentials
- CVE-2026-25803 — 3DP-MANAGER Uses Hard-coded Credentials
- CVE-2026-24448 — Use of hard-coded credentials issue exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an attacker to obtain administr
- CVE-2026-23647 — Glory RBG-100 Recycler System Hard-coded OS Credentials
- CVE-2025-9497 — Hardcoded Upgrade Decryption Passwords
- CVE-2020-37135 — AMSS++ 4.7 - Backdoor Admin Account
- CVE-2019-25322 — Heatmiser Netmonitor 3.03 - Hardcoded Credentials