Input Validation Flaw in Hisense VIDAA Smart TV Firmware
CVE-2026-123995

4.8MEDIUM

Key Information:

Vendor

Hisense

Status
Vidaa
Vendor
CVE Published:
6 November 2026

Badges

👾 Exploit Exists

What is CVE-2026-123995?

The Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 is affected by an input validation weakness within the UPnP/DLNA AVTransport SOAP service. This vulnerability allows an attacker on the same local network to exploit the CurrentURI field during a SetAVTransportURI call, enabling them to inject various URIs without proper checks on the scheme or host. As a result, malicious actors can redirect the TV to fetch and display content from unauthorized sources after a one-time DLNA pairing. This could potentially lead to the display of their phishing pages, false firmware alerts, or forged emergency notifications, all while executing additional commands quietly.

Affected Version(s)

VIDAA 0000.01.00a.P0220

References

https://github.com/yehia-mamdouh/Hisense-Smart-TV-Securit...
technical-descriptionexploit
https://www.vulncheck.com/advisories/hisense-vidaa-smart-...
third-party-advisory

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Yehia Elghaly (Mrvar0x)
.