CVE-2026-30650: Buffer Overflow

Published Jun 2, 2026

Updated

A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an authenticated attacker to execute arbitrary code as root on the device remotely.

Affected Software

3 affected components

Vivotek FD8136=FD8136-VVTK-0300a

All of the following

Vivotek FD8136 firmware=0300a

Vivotek FD8136

Event History

Jun 2, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-30650?

CVE-2026-30650 has a severity score of 8.8, indicating a high risk level.

How do I fix CVE-2026-30650?

To resolve CVE-2026-30650, update the firmware of Vivotek FD8136 cameras to the latest version provided by the vendor.

What vulnerabilities are associated with CVE-2026-30650?

CVE-2026-30650 is primarily associated with a remote buffer overflow vulnerability affecting the /cgi-bin/admin/eventtask.cgi endpoint.

Who is affected by CVE-2026-30650?

CVE-2026-30650 affects users of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a.

What can an attacker do with CVE-2026-30650?

An authenticated attacker can exploit CVE-2026-30650 to execute arbitrary code as root on the affected device remotely.