VITEC vulnerabilities
We track 3 vulnerabilities in VITEC products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
Latest VITEC vulnerabilities
- 9.8 Critical severity
EZ TV Platform Server: Missing Authentication for Critical Functionality
VITEC EZ TV Platform Server before 8.5.0 contains an unrestricted file upload vulnerability in the upload handler that allows unauthenticated remote attackers to upload arbitrary files by supplying a target filename in the X-FILENAME request header with no aut
- 9.8 Critical severity
Flamingo: Improper Neutralization of Special Elements used in an OS Command
Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/gen_graphs.php endpoint that allows remote unauthenticated attackers to execute arbitrary commands by supplying shell metacharacters in the start, end, key,
- 9.8 Critical severity
Flamingo: Improper Neutralization of Special Elements used in an OS Command
Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/ping.php endpoint that allows remote attackers to execute arbitrary commands by exploiting a double-evaluation flaw in shell argument handling. The endpoint