What is CVE-2026-19828?
A path traversal vulnerability was found in the Snapshot Endpoint of PlayController.java in 648540858 wvp-GB28181-pro version 2.7.4-20260107. Remote attackers can manipulate the deviceId/channelId argument to gain unauthorized access to files. Updating to the latest version is strongly recommended.
Azərbaycanca: 648540858 wvp-GB28181-pro 2.7.4-20260107 versiyasında PlayController.java faylının Snapshot Endpoint komponentində path traversal zəifliyi aşkarlanıb. Uzaqdan hücum edən şəxs deviceId/channelId arqumentini manipulyasiya edərək sistemdəki fayllara icazəsiz giriş əldə edə bilər. Təhlükəsizlik üçün proqramı ən son versiyaya yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-22; shared vendor: 648540858
FAQ2
Which version of 648540858 wvp-GB28181-pro is affected by CVE-2026-19828?
This path traversal vulnerability affects version 2.7.4-20260107.
How to protect against CVE-2026-19828?
The primary recommended mitigation is to update the software to the latest version.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.