Is CVE-2026-22755 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-22755 being exploited in the wild.

How severe is CVE-2026-22755?

High severity, published 29 September 2026.

Which products and versions are affected?

VIVOTEK FD9187 Camera; VIVOTEK FD9189 Camera; VIVOTEK FD9365 Camera; VIVOTEK FD9387 Camera; and 20 more.

Is there a fix for CVE-2026-22755?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-22755 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-22755?

Check whether you run VIVOTEK FD9187 Camera, VIVOTEK FD9189 Camera, VIVOTEK FD9365 Camera or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-22755: VIVOTEK camera firmware remote command execution

CVE-2026-22755 · Severity: high · Published 2026-09-29

VIVOTEK network cameras used for surveillance in buildings and facilities are vulnerable to remote command execution attacks. An attacker can exploit this flaw to gain full control of the camera, including potential root-level access, allowing them to access video feeds, disable monitoring, or use the device as a pivot point to attack the wider network.

Vendors: VIVOTEK.

Quick answers

Is CVE-2026-22755 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-22755 being exploited in the wild.
How severe is CVE-2026-22755?: High severity, published 29 September 2026.
Which products and versions are affected?: VIVOTEK FD9187 Camera; VIVOTEK FD9189 Camera; VIVOTEK FD9365 Camera; VIVOTEK FD9387 Camera; and 20 more.
Is there a fix for CVE-2026-22755?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-22755 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-22755?: Check whether you run VIVOTEK FD9187 Camera, VIVOTEK FD9189 Camera, VIVOTEK FD9365 Camera or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability allows remote code execution on affected VIVOTEK camera models, potentially with root privileges. The flaw impacts multiple camera series (V, C, S) across different model lines (FD, FE, IB, IP, IT, MA, MS). Successful exploitation leads to full compromise of the camera system.

Affected products

VIVOTEK FD9187 Camera
VIVOTEK FD9189 Camera
VIVOTEK FD9365 Camera
VIVOTEK FD9387 Camera
VIVOTEK FD9389 Camera
VIVOTEK FD9391 Camera
VIVOTEK FE9180 Camera
VIVOTEK FE9191 Camera
VIVOTEK FE9382 Camera
VIVOTEK FE9391 Camera
VIVOTEK IB9365 Camera
VIVOTEK IB9387 Camera
VIVOTEK IB9389 Camera
VIVOTEK IB939 Camera
VIVOTEK IP9165 Camera
VIVOTEK IP9171 Camera
VIVOTEK IP9172 Camera
VIVOTEK IP9181 Camera
VIVOTEK IP9191 Camera
VIVOTEK IT9389 Camera
VIVOTEK MA9321 Camera
VIVOTEK MA9322 Camera
VIVOTEK MS9321 Camera
VIVOTEK MS9390 Camera

Timeline

2026-09-29: disclosed

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.