PT-2026-2045 · Meritlilin · Merit Lilin Ip Camera

An-Wei Kung + 5 · Published 2026-01-12 · Updated 2026-01-17 · CVE-2026-0855

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Merit LILIN IP Camera models (affected versions not specified)

Description Certain IP Camera models developed by Merit LILIN are susceptible to an OS Command Injection issue. Authenticated remote attackers can exploit this to inject and execute arbitrary OS commands on the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-0855

Affected Products

Merit Lilin Ip Camera

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-0855 · Security Note
• https://t.me/cveNotify/148391 · Telegram Post
• https://t.me/CVEtracker/41978 · Telegram Post
• https://twcert.org.tw/en/cp-139-10626-afbe2-2.html · Note
• https://twitter.com/cracbot/status/2012480089792164340 · Twitter Post
• https://twcert.org.tw/tw/cp-132-10625-fac5c-1.html · Note