CVE-2026-22755

CVE-2026-22755 is a critical command injection vulnerability (CWE-77) affecting numerous Vivotek camera models across various firmware versions. This flaw allows an unauthenticated attacker to execute arbitrary operating system commands due to improper neutralization of special elements. With a CVSSv4 score of 9.3 (Critical), this vulnerability presents a significant risk, as it can be exploited remotely over the network with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. The high severity indicates that successful exploitation could grant full control over affected devices. While there is no evidence of active exploitation in the wild, the vulnerability has garnered significant community attention with 10 mentions, suggesting potential for future exploit development. Currently, no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB.