Ispyconnect vulnerabilities
We track 2 vulnerabilities in Ispyconnect products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 18, 2025.
2vulnerabilities
0critical
2high
0exploited
8.3average CVSS score
Latest Ispyconnect vulnerabilities
- 7.8 High severity
Agent Dvr: Improper Limitation of a Pathname to a Restricted Directory
Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attacker to gain access to sensitive information, cause a server-side forgery request (SSRF), or execute OS commands.
- 8.8 High severity
Agent Dvr: Unrestricted Upload of File with Dangerous Type
Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files via the upload audio component.