CVE-2026-123993

HIGH 8.8

Hisense VIDAA Smart TV Unauthenticated WebDriver Remote Access

CVSS Score

8.8

EPSS Score

0.0%

EPSS Percentile

0th

Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vulnerability where a QA build of the Google Cobalt browser engine exposes the WebDriver automation server on TCP port 4444 across all network interfaces without any authentication or pairing requirement. A LAN-adjacent attacker can connect to the exposed WebDriver service to execute arbitrary JavaScript, read and exfiltrate sensitive localStorage data including ACR telemetry, MAC addresses, ad-service credentials, and location data, inject persistent content onto the display, and access the window.hisense native bridge to perform filesystem read/write and system-state operations.

CWE	CWE-489 CWE-306
Vendor	hisense
Product	vidaa
Published	Nov 6, 2026

Stay Ahead of the Next One

Get instant alerts for hisense vidaa

Be the first to know when new high vulnerabilities affecting hisense vidaa are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

Hisense / VIDAA

0000.01.00a.P0220

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/yehia-mamdouh/Hisense-Smart-TV-Security-Research vulncheck.com: https://www.vulncheck.com/advisories/hisense-vidaa-smart-tv-unauthenticated-webdriver-remote-access

Credits

Yehia Elghaly (Mrvar0x)