CVE-2026-0855: Merit LILIN｜IP Camera - OS Command Injection
Published Jan 12, 2026
·Updated
Certain IP Camera models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device.
Affected Software
1 affected component
Merit LILIN IP Camera
Remediation
Information
The IPD/IPR/LD/LR models are no longer supported and replacement is recommended. For the remaining affected models, please refer to the official advisory(M00176) to update the firmware.
Event History
Jan 12, 2026
CVE Published
via MITRE·06:44 AM
Data Sourced
via MITRE·06:44 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·07:16 AM
DescriptionSeverityWeakness
Apr 12, 58019
Event
via FIRST·01:59 AM
Frequently Asked Questions
1
What is the severity of CVE-2026-0855?
CVE-2026-0855 is classified as a critical severity vulnerability due to the potential for remote command execution.
2
How do I fix CVE-2026-0855?
To mitigate CVE-2026-0855, update the firmware of the Merit LILIN IP Camera to the latest version provided by the vendor.
3
Which devices are affected by CVE-2026-0855?
CVE-2026-0855 affects specific models of Merit LILIN IP Cameras.
4
What types of attacks can be executed using CVE-2026-0855?
CVE-2026-0855 allows authenticated remote attackers to execute arbitrary OS commands on the vulnerable IP Camera.
5
Who is at risk due to CVE-2026-0855?
Users and organizations utilizing the affected Merit LILIN IP Cameras are at risk of exploitation through CVE-2026-0855.