CVE Catalog
CVE-2026-88622
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk1.09%
64th percentile - higher than 64% of all known CVEs
Summary
NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handle_import_privilege.php.
Risk Assessment
An attacker can execute arbitrary system commands on the device, potentially leading to full compromise of the recorder and access to video recordings.
Recommendation
Update NUUO Network Video Recorder software to the latest version or apply compensating controls such as restricting access to the management interface.
Other vulnerabilities in NUUO Network Video Recorder
Original NVD description (English source)
NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handle_import_privilege.php.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS