Buffer Overflow Vulnerability in VIVOTEK FD8136 Product
CVE-2026-30649

7.3HIGH

Key Information:

Vendor

VIVOTEK INC

Status
FD8136-VVTK-0300a
Vendor
CVE Published:
2 June 2026

What is CVE-2026-30649?

A buffer overflow vulnerability in the VIVOTEK FD8136 product permits remote attackers to potentially execute arbitrary code. This can occur through improper handling of requests sent to the set_getparam.cgi component, leading to significant security risks. Users of this product should take immediate action to safeguard their systems and monitor for any suspicious activity. For more details, refer to the official documentation and security advisories.

References

https://github.com/xchg-rax-rax/vulnerability-research/tr...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.