Advisories · Technology

648540858 wvp-GB28181-pro.

Every CVE that names 648540858 wvp-GB28181-pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-19829 CVE record

CVSS 5.3 Medium

648540858 wvp-GB28181-pro Log File Download Endpoint LogController.java path traversal
- 648540858 wvp-GB28181-pro
- Path traversal
Not analysed yet 14 Aug 2026
CVE-2026-19828 CVE record

CVSS 5.3 Medium

648540858 wvp-GB28181-pro Snapshot Endpoint PlayController.java path traversal
- 648540858 wvp-GB28181-pro
- Path traversal
Not analysed yet 14 Aug 2026
CVE-2026-4860 CVE record

CVSS 6.9 Medium

648540858 wvp-GB28181-pro API Endpoint RedisTemplateConfig.java GenericFastJsonRedisSerializer deserialization
- 648540858 wvp-GB28181-pro
- Insecure deserialization
- CWE-20
Not analysed yet 26 Mar 2026
CVE-2026-4597 CVE record

CVSS 5.3 Medium

648540858 wvp-GB28181-pro Stream Proxy Query StreamProxyProvider.java selectAll sql injection
- 648540858 wvp-GB28181-pro
- Other injection
- SQL injection
Not analysed yet 23 Mar 2026
CVE-2026-3966 CVE record

CVSS 5.3 Medium

648540858 wvp-GB28181-pro IP Address ABLMediaNodeServerService.java getDownloadFilePath server-side request forgery
- 648540858 wvp-GB28181-pro
- Server-side request forgery (SSRF)
Not analysed yet 12 Mar 2026