CVE-2026-68953

Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product Lineups

CVSS 7.1 high · Digital Watchdog VMAX A1 G4 DVR · published 2026-09-15

The affected products are vulnerable to an authentication bypass that allows unauthenticated remote attackers to disclose sensitive device information, including administrator credentials in plaintext, by sending crafted HTTP(S) requests.

NVD · CVE.org

Coverage 1 source

1. 2026-09-15 CISA Cybersecurity Advisories high Digital Watchdog VMAX DVR and NVR Product Lineups

   Multiple vulnerabilities in Digital Watchdog VMAX DVR and NVR products could allow attackers to gain full administrative control.

Mentioned with

CVE-2026-66372 CVE-2026-66887 CVE-2026-66890 CVE-2026-68070 CVE-2026-68950

Also covered

• CVE-2026-86950 Apple iOS and iPadOS CVSS 8.8 · 1 article · 2026-09-29
• CVE-2023-6548 Cloud Software Group NetScaler ADC CVSS 5.5 · 1 article · 2026-09-28
• CVE-2023-25608 Fortinet FortiAP-W2 CVSS 5.2 · 1 article · 2026-09-28
• CVE-2026-88772 Memory overflow vulnerability leading to Remote Code Execution or Denial of Service CVSS 9.5 · 3 articles · 2026-09-28
• CVE-2026-88771 A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands CVSS 9.5 · 3 articles · 2026-09-28