CVE-2026-35717
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A stack-based buffer overflow in export_language.cgi on VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root via a crafted POST request with a controlled Content-Length value.
Risk Assessment
An attacker can remotely execute arbitrary code with root privileges, leading to full device compromise.
Recommendation
Install updated firmware from the vendor if available. Restrict access to the camera's admin interface.
Other vulnerabilities in VIVOTEK FD8136
See all- CVE-2026-30652High
A remote buffer overflow vulnerability in the /cgi-bin/dido/setdo.cgi endpoint of Vivotek FD8136 cameras (firmware FD8136-VVTK-0300a) allows an authenticated attacker to execute arbitrary code as root.
- CVE-2026-30650High
A post-authentication buffer overflow vulnerability in the /cgi-bin/admin/eventtask.cgi endpoint of the Vivotek FD8136 camera with firmware FD8136-VVTK-0300a allows an authenticated attacker to execute arbitrary code as root remotely.
Original NVD description (English source)
A stack-based buffer overflow in the export_language.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary code as root via a crafted POST request to the /cgi-bin/admin/export_language.cgi endpoint. The handler passes the attacker-controlled Content-Length value directly to fread() as the read size into a fixed-size 0x60-byte stack buffer, overwriting the saved link register. The binary is compiled without stack canaries.