Merit LILIN vulnerabilities
We track 5 vulnerabilities in Merit LILIN products across 30 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on January 12, 2026.
Latest Merit LILIN vulnerabilities
- 8.8 High severity
P2: Improper Neutralization of Special Elements used in an OS Command
Certain IP Camera models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device.
- 8.8 High severity
DH032: Improper Neutralization of Special Elements used in an OS Command
Certain DVR/NVR models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device.
- 9.3 Critical severity
A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior…
A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 via the Server field in the NTPUpdate configuration. The web service at /z/zbin/dvr_box fails to properly sanitize input, allowing
- 8.7 High severity
DVR Firmware: Exposure of Sensitive Information to an Unauthorized Actor
An unauthenticated arbitrary file read exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 via the /z/zbin/net_html.cgi endpoint. This vulnerability allows attackers to read sensitive configuration files, such as /zco
- 8.7 High severity
A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior…
A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 due to insufficient sanitization of the FTP and NTP Server fields in the service configuration. An attacker with access to the conf