What is GHSA-qp5w-cf66-hcww?

GHSA-qp5w-cf66-hcww is a security advisory published by GitHub Security Advisories with unknown severity. A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the...

Which CVE IDs does GHSA-qp5w-cf66-hcww cover?

GHSA-qp5w-cf66-hcww covers the following CVE IDs: CVE-2026-30652. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-qp5w-cf66-hcwwunknown

A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the...

Vendor

GitHub Security Advisories

Published

June 2, 2026

Last Modified

June 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-30652 →

📋 Description

A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an authenticated attacker to execute arbitrary code as root on the device.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-30652
https://github.com/xchg-rax-rax/vulnerability-research/tree/main/CVE-2026-30652
http://vivotek.com
https://github.com/advisories/GHSA-qp5w-cf66-hcww