Vivotek vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20252
3. 20265

Newest CVEs

• CVE-2026-22755

  Legacy Vivotek Camera Firmware Command Injection in upload_map.cgi

  Vivotek · Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330

  Critical9.3
• CVE-2025-66052

  Command injection in Vivotek IP7137 cameras

  Vivotek · IP7137

  High8.6
• CVE-2025-66051

  Path traversal in Vivotek IP7137 cameras

  Vivotek · IP7137

  Medium6.9
• CVE-2025-66050

  No password set for administrative account in Vivotek IP7137 cameras

  Vivotek · IP7137

  Critical9.3
• CVE-2025-66049

  Unprotected RTSP stream in Vivotek IP7137 cameras

  Vivotek · IP7137

  High8.7
• CVE-2025-12592

  Use of default login credentials in Legacy Vivotek Devices

  Vivotek · Affected device model numbers are FD7131-VVTK,FD7131-VVTK,FD7131-VVTK,FD7141-VVTK,IP7131-VVTK,IP7133-VVTK,IP7133-VVTK,IP7133-VVTK,IP7134-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7138-VVTK,IP7142-VVTK,IP7142-VVTK,IP7151-VVTK,IP7152-VVTK,IP7153-VVTK,IP7153-VVTK,IP7154-VVTK,IP7330-VVTK,IP7330-VVTK,IP7330-VVTK,IP8131-VVTK,IP8131-VVTK,IP8131-VVTK,IP8131W-VVTK,PT7135-VVTK,PT7137-TCON,PT7137-VVTK,PT7137-VVTK,PT7137-VVTK,PT7137-VVTK,PZ7131-VVTK,PZ7131-VVTK,PZ71X1-VVTK,PZ71X1-VVTK,PZ71X2-VVTK,SD73X3-VVTK,SD73X3-VVTK,SD73X3-VVTK,TC5330-VVTK,TC5332-TCVV,TC5333-TCVV,TC5633-TCVV,TC5633-VVTK,VS7100-VVTK,VS7100-VVTK,VS7100-VVTK

  Critical9.3
• CVE-2025-3403

  Vivotek NVR ND8422P/NVR ND9525P/NVR ND9541P HTML Form sensitive information in source

  Vivotek · NVR ND8422P

  Medium5.1
• CVE-2024-7443

  Vivotek IB8367A upload_file.cgi getenv command injection

  Vivotek · IB8367A

  Medium5.3
• CVE-2024-7442

  Vivotek SD9364 upload_file.cgi getenv command injection

  Vivotek · SD9364

  Medium5.3
• CVE-2024-7441

  Vivotek SD9364 httpd read stack-based overflow

  Vivotek · SD9364

  High8.7