CVE-2026-88623
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
NUUO Network Video Recorder 2.0.0 is vulnerable to arbitrary file read. In up.php, the url parameter submitted via POST is received and fopen() opens the URL in binary read-only mode, then the content is written to /tmp/ with a filename derived from basename() of the URL. This operation requires no authentication.
Risk Assessment
An unauthenticated attacker can read arbitrary files accessible to the server process and write their contents to /tmp/, potentially leading to leakage of sensitive system data.
Recommendation
Restrict network access to the NUUO NVR interface and update the software to a version without the vulnerability. Until patched, consider disabling or securing up.php.
Other vulnerabilities in NUUO Network Video Recorder
Original NVD description (English source)
NUUO Network Video Recorder 2.0.0 is vulnerable to arbitrary file read. In up.php, the url parameter submitted by the user via POST is received, and fopen() is used to open the URL in binary read-only mode. The content is then written to the /tmp/ directory, with the filename derived from basename() of the URL. This operation requires no authentication.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS