Authentication Bypass Vulnerability in Digital Watchdog Products
CVE-2026-68953

7.1HIGH

Key Information:

Vendor

Digital Watchdog

Status
Vmax A1 G4 Dvr
Vmax Ip G4 Nvr
Vmax A1 Plus
Va1g4 Recorder
Vendor
CVE Published:
15 September 2026

What is CVE-2026-68953?

Digital Watchdog products are susceptible to an authentication bypass vulnerability that enables unauthorized remote attackers to gain access to sensitive device information. By sending specially crafted HTTP(S) requests, attackers can retrieve administrator credentials in plaintext, potentially compromising the security of the device and its configuration. It is essential for users to implement necessary cybersecurity measures to protect their devices from unauthorized access.

Affected Version(s)

VA1G4 Recorder All

VG4 Recorder All

VMAX A1 G4 DVR All

References

https://digital-watchdog.com/downloads/
https://www.cisa.gov/news-events/ics-advisories/icsa-26-2...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Scot Berner of TrustedSec reported this vulnerability to CISA.
.