OS Command Injection Vulnerability in Merit LILIN IP Cameras
CVE-2026-0855

8.7HIGH

Key Information:

Vendor

Merit Lilin

Status
P2
P3
Z7
P6
Vendor
CVE Published:
12 January 2026

What is CVE-2026-0855?

Merit LILIN IP Cameras possess a vulnerability that enables authenticated remote attackers to perform OS command injection. By exploiting this flaw, attackers can inject arbitrary commands, leading to unauthorized operations on the device. It is crucial for users and network administrators to maintain updated firmware and implement security measures to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

IPD 0

IPR 0

LD 0

References

https://www.twcert.org.tw/tw/cp-132-10625-fac5c-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-10626-afbe2-2.html
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.