PT-2026-2045 · Meritlilin · Merit Lilin Ip Camera

An-Wei Kung + 5 · Publicado 2026-01-12 · Atualizado 2026-01-17 · CVE-2026-0855

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Merit LILIN IP Camera models (affected versions not specified)

Description Certain IP Camera models developed by Merit LILIN are susceptible to an OS Command Injection issue. Authenticated remote attackers can exploit this to inject and execute arbitrary OS commands on the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2026-0855

Produtos afetados

Merit Lilin Ip Camera

Referências · 6

• https://t.me/cveNotify/148391 · Publicação no Telegram
• https://t.me/CVEtracker/41978 · Publicação no Telegram
• https://twcert.org.tw/en/cp-139-10626-afbe2-2.html · Nota
• https://twitter.com/cracbot/status/2012480089792164340 · Publicação no Twitter
• https://twcert.org.tw/tw/cp-132-10625-fac5c-1.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-0855 · Nota de Segurança