Agent Dvr vulnerabilities

2 known vulnerabilities in Agent Dvr from Ispyconnect. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Agent Dvr: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-63408Nov 18, 2025Ispyconnect

  Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attacker to gain access to sensitive information, cause a server-side forgery request (SSRF), or execute OS commands.

• 8.8 High severity

  Agent Dvr: Unrestricted Upload of File with Dangerous Type

  CVE-2024-22515Feb 6, 2024IspyconnectEPSS 1.21%

  Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files via the upload audio component.