CVE-2026-123998

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 6, 2026

Last Seen

November 6, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CVE-2026-123998: Authentication Bypass in Hisense VIDAA Smart TVs63.0

Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 has an authentication bypass vulnerability (CVE-2026-123998) in its remote-control MQTT broker on TCP port 36669. This flaw allows LAN-adjacent attackers to exploit weak default credentials and a 4-digit pairing PIN, enabling brute-force attacks in...