CyberSecBulletin

Hisense vulnerabilities

We track 2 vulnerabilities in Hisense products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.

2vulnerabilities
0critical
2high
0exploited
8.6average CVSS score

Latest Hisense vulnerabilities

  • 8.3 High severity

    VIDAA: Improper Restriction of Excessive Authentication Attempts

    CVE-2026-123998Hisense

    Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an authentication bypass vulnerability in its remote-control MQTT broker on TCP port 36669, which accepts publicly documented default credentials and an ineffective 4-digit pairing PIN with no rate li

  • 8.8 High severity

    VIDAA: Missing Authentication for Critical Functionality

    CVE-2026-123993Hisense

    Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vulnerability where a QA build of the Google Cobalt browser engine exposes the WebDriver automation server on TCP port 4444 across all network interfaces without any authenti