DBL Technology (DBLTek) vulnerabilities
We track 1 vulnerability in DBL Technology (DBLTek) products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2025.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest DBL Technology (DBLTek) vulnerabilities
- 8.7 High severity
GoIP-1: Improper Limitation of a Pathname to a Restricted Directory
DBLTek GoIP-1 firmware versions up to and including GHSFVT-1.1-67-5 contain a local file inclusion vulnerability. The device's web server exposes handlers (`frame.html` and `frame.A100.html`) that accept a path parameter (`content` or `sidebar`) which is not p