Vulnerabilities, exploitation and vendor advisories affecting video infrastructure https://videosoc.com/ 2026-09-05T00:00:00Z https://videosoc.com/advisories/component-vulnerabilities-in-video-devices/ 2026-09-05T00:00:00Z 2026-09-05T00:00:00Z

CVE-2021-3156, the sudo heap overflow known as Baron Samedit, is recorded in NVD against the Synology VS960HD and has been in CISA's Known Exploited Vulnerabilities catalogue since April 2022 — catalogued under the vendor name "Sudo", where no camera owner is looking.

https://videosoc.com/advisories/dlink-network-storage-and-nvr-exploited/ 2026-09-05T00:00:00Z 2026-09-05T00:00:00Z

Two D-Link command-injection and hard-coded-credential flaws plus a Backup Config integrity failure (CWE-494) are in CISA's exploited catalogue; the KEV entries say "NAS" and "DNR-322L", but the CPE match names DNR-series network video recorders.

https://videosoc.com/advisories/geovision-end-of-life-devices-exploited/ 2026-09-05T00:00:00Z 2026-09-05T00:00:00Z

Discontinued GeoVision IP cameras, video servers, LPR units and DVRs carry two unauthenticated OS command injection flaws that CISA records as exploited, and because the products are end-of-life there is no fix to apply.

https://videosoc.com/advisories/hikvision-web-server-command-injection/ 2026-09-05T00:00:00Z 2026-09-05T00:00:00Z

An unauthenticated command injection in the Hikvision camera web server, alongside a 2017 improper-authentication flaw in an overlapping product line; both are recorded by CISA as exploited.