Security Advisory

CVE-2026-19828

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-14 13:30:09

Last updated 2026-08-18 13:39:05

Assigner VulDB

CVSS score 6.5

State PUBLISHED

Description

A vulnerability was identified in 648540858 wvp-GB28181-pro 2.7.4-20260107. This affects an unknown part of the file PlayController.java of the component Snapshot Endpoint. The manipulation of the argument deviceId/channelId leads to path traversal. The attack may be initiated remotely. The exploit is publicly available and might be used.

← Browse all CVEs View on cve.org ↗