Qvidium vulnerabilities
We track 2 vulnerabilities in Qvidium products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 31, 2026.
2vulnerabilities
2critical
0high
0exploited
9.9average CVSS score
Latest Qvidium vulnerabilities
- 10.0 Critical severity
Opera11: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/net_tr.cgi of the component CGI Script. This manipulation of the argument ipaddr causes command injection. The attack may be initiated re
- 9.8 Critical severity
The QVidium Opera11 device (firmware version 2.9.0-Ax4x-opera11) is vulnerable to Remote Code…
The QVidium Opera11 device (firmware version 2.9.0-Ax4x-opera11) is vulnerable to Remote Code Execution (RCE) due to improper input validation on the /cgi-bin/net_ping.cgi endpoint. An attacker can exploit this vulnerability by sending a specially crafted GET