CVE-2026-34005
CVSS Score
8.8
EPSS Score
0.1%
EPSS Percentile
25th
In Sofia on Xiongmai DVR/NVR (AHB7008T-MH-V2 and NBD7024H-P) 4.03.R11 devices, root OS command injection can occur via shell metacharacters in the HostName value via an authenticated DVRIP protocol (TCP port 34567) request to the NetWork.NetCommon configuration handler, because system() is used.
| CWE | CWE-78 |
| Vendor | xiongmai |
| Product | dvr/nvr devices |
| Published | Mar 29, 2026 |
| Last Updated | Mar 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for xiongmai dvr/nvr devices
Be the first to know when new high vulnerabilities affecting xiongmai dvr/nvr devices are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Xiongmai / DVR/NVR devices
4.03.R11