https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T18:48:36.972804+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-7443 CVE-2024-7443 — Vivotek IB8367A upload_file.cgi getenv command injection 2026-10-08T18:48:36.988803+00:00

Affected: Vivotek IB8367A

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Vivotek IB8367A VVTK-0100b. Affected is the function getenv of the file upload_file.cgi. The manipulation of the argument QUERY_STRING leads to command injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-273528. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the affected release tree is end-of-life.