Critical Vivotek Flaw Enables Remote Arbitrary Code Execution

Gbhackers •Varshini • January 22, 2026

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vivotek Vulnerability Enables Remote Code Execution A critical vulnerability in Vivotek legacy firmware allows unauthenticated attackers to execute arbitrary commands with root privileges. Tracked as CVE-2026-22755, it affects numerous camera models and is particularly concerning for organizations using outdated surveillance systems. The flaw is found in the upload_map.cgi script, which improperly processes user-supplied filenames. 3 sources 48

Critical Vivotek Flaw Enables Remote Arbitrary Code Execution

The full story

Extracted Entities

Companies (1)

Vulnerabilities (1)