Is CVE-2026-6824 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-6824 being exploited in the wild.

How severe is CVE-2026-6824?

High severity, with a CVSS score of 8.4, published 29 May 2026.

Which products and versions are affected?

CP Plus CP-UNR-108F1 Hardware V1.0; CP Plus CP-UNR-108F1 System V4.001.00AT009.0.R; CP Plus CP-UNR-108F1 Web V3.2.7.128806.

Is there a fix for CVE-2026-6824?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-6824 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-6824?

Check whether you run CP Plus CP-UNR-108F1 Hardware, CP Plus CP-UNR-108F1 System or CP Plus CP-UNR-108F1 Web at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-6824: CP Plus NVR stored XSS in 1xxx series devices

CVE-2026-6824 · Severity: high · CVSS 8.4 · Published 2026-05-29

CP Plus 1xxx series Network Video Recorders (NVR), used for managing security camera footage, are affected by a security flaw that allows attackers to inject malicious scripts into the device's management interface. If an administrator views the compromised page, the attacker could hijack their session, perform unauthorized actions, or steal sensitive data. This could lead to a full compromise of the surveillance system and its recorded data.

Vendors: CP Plus.

Quick answers

Is CVE-2026-6824 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-6824 being exploited in the wild.
How severe is CVE-2026-6824?: High severity, with a CVSS score of 8.4, published 29 May 2026.
Which products and versions are affected?: CP Plus CP-UNR-108F1 Hardware V1.0; CP Plus CP-UNR-108F1 System V4.001.00AT009.0.R; CP Plus CP-UNR-108F1 Web V3.2.7.128806.
Is there a fix for CVE-2026-6824?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-6824 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-6824?: Check whether you run CP Plus CP-UNR-108F1 Hardware, CP Plus CP-UNR-108F1 System or CP Plus CP-UNR-108F1 Web at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A stored cross-site scripting (XSS) vulnerability exists in CP Plus 1xxx series NVR devices (specifically CP-UNR-108F1) due to insufficient sanitization of user-supplied input in specific functional modules. An attacker with high privileges can inject malicious JavaScript into the device backend. When other authenticated users or administrators navigate to the affected functional pages, the script executes within their browser context. This can result in session hijacking, manipulation of sensitive data, or unauthorized administrative actions. A firmware update (V1.00.14.01.T.260326) has been released to mitigate this issue.

Affected products

CP Plus CP-UNR-108F1 Hardware V1.0
CP Plus CP-UNR-108F1 Web V3.2.7.128806
CP Plus CP-UNR-108F1 System V4.001.00AT009.0.R

Timeline

2026-05-28: advisory: Initial publication by CISA (ICSA-26-148-05)
2026-05-29: disclosed: NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.