CVE-2026-123996

MEDIUM 4.6

Hisense VIDAA Smart TV UPnP/DLNA Missing Authentication

CVSS Score

4.6

EPSS Score

0.0%

EPSS Percentile

0th

Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains a missing authentication vulnerability in the UPnP/DLNA RenderingControl service on TCP port 38400 that allows a LAN-adjacent attacker to issue SetVolume, SetMute, and SelectPreset(FactoryDefaults) commands after a one-time DLNA pairing with no per-command authentication or session token. Attackers can send a continuous loop of unauthenticated commands to override the physical remote, change volume and mute, and reset all picture and audio calibration settings.

CWE	CWE-306
Vendor	hisense
Product	vidaa
Published	Nov 6, 2026

Stay Ahead of the Next One

Get instant alerts for hisense vidaa

Be the first to know when new medium vulnerabilities affecting hisense vidaa are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

Low

Affected Versions

Hisense / VIDAA

0000.01.00a.P0220

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/yehia-mamdouh/Hisense-Smart-TV-Security-Research vulncheck.com: https://www.vulncheck.com/advisories/hisense-vidaa-smart-tv-upnp-dlna-missing-authentication

Credits

Yehia Elghaly (Mrvar0x)