CVE-2026-30652: Buffer Overflow

Published Jun 2, 2026

Updated

A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an authenticated attacker to execute arbitrary code as root on the device.

Affected Software

3 affected components

Vivotek FD8136=FD8136-VVTK-0300a

All of the following

Vivotek FD8136 firmware=0300a

Vivotek FD8136

Event History

Jun 2, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-30652?

CVE-2026-30652 has a high severity rating of 8.8 according to the CVSS 3.1 standard.

How do I fix CVE-2026-30652?

To fix CVE-2026-30652, update the Vivotek FD8136 camera firmware to the latest version that addresses this vulnerability.

What type of vulnerability is CVE-2026-30652?

CVE-2026-30652 is categorized as a buffer overflow vulnerability.

Can CVE-2026-30652 be exploited remotely?

Yes, CVE-2026-30652 can be exploited remotely by an authenticated attacker via the /cgi-bin/dido/setdo.cgi endpoint.

What is the impact of CVE-2026-30652 on the Vivotek FD8136 cameras?

The impact of CVE-2026-30652 allows an authenticated attacker to execute arbitrary code as root on the affected Vivotek FD8136 cameras.