CVE-2026-0854

Publication date

2026-01-12 05:58:52

Family

twcert

State

PUBLISHED

Description

Certain DVR/NVR models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device.