HIGHCVE-2026-0855Published Modified CNA twcert
CVE-2026-0855: Merit LILIN|IP Camera - OS Command Injection
Certain IP Camera models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device.
Metrics
- CVSS v4.0
- 8.7
- Severity
- HIGH
- Fixed in
- —
- Affected Products
- 9
Affected packages
- Merit LILIN / P20
- Merit LILIN / P30
- Merit LILIN / Z70
- Merit LILIN / P60
- Merit LILIN / V10
- Merit LILIN / IPD0
- Merit LILIN / IPR0
- Merit LILIN / LD0
- Merit LILIN / LR0
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NReferences