Vacron vulnerabilities

Products

• VIN-DS783E-E6 2
• Camera 1
• Network Video Recorder (NVR) 1

Latest Vacron CVEs

Newest publication first

1. CVE-2026-18192 Vacron｜IP Camera - Arbitrary File Read

   Published 2026-07-29

   High·CVSS 7.1 EPSS 0.57%

   VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.

2. CVE-2026-18191 Vacron｜IP Camera - Hidden Functionality

   Published 2026-07-29

   Critical·CVSS 9.3 EPSS 0.69%

   VIN-DS783E-E6 developed by Vacron has a Hidden Functionality vulnerability, allowing unauthenticated remote attackers to exploit a specific hidden function to obtain the administrator credentials of the device.

3. CVE-2025-8613 Vacron Camera ping Command Injection Remote Code Execution Vulnerability

   Published 2025-09-02

   High·CVSS 7.2 EPSS 1.2%

   Vacron Camera ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vacron Camera devices. Authentication is required to exploit this vulnerability. The specific flaw exists wi...

4. CVE-2025-34043 Vacron NVR Remote Command Execution

   Published 2025-06-26

   Critical·CVSS 10.0 EPSS 7.5%

   A remote command injection vulnerability exists in Vacron Network Video Recorder (NVR) devices v1.4 due to improper input sanitization in the board.cgi script. The vulnerability allows unauthenticated attackers to pass arbitrary commands to the underlying operating system via cra...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.