Secuno
ENNL
Book demo

CVE-2026-88622

8.8 HIGH
  1. Published18 Sept 2026

Description

NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handle_import_privilege.php.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityLow
Privileges requiredNone
User interactionRequired
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-937429.9
A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this…
CVE-2026-933718.3
A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4.…
CVE-2026-858859.9
Improper neutralization of special elements used in a command ('command injection') in…
CVE-2026-203259.9
As part of Cisco's ongoing commitment to proactive security and product quality, the…
CVE-2026-201769.1
A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute…
CVE-2026-923989.1
A vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this…

Frequently asked

Is CVE-2026-88622 being actively exploited?

CVE-2026-88622 is not in the CISA KEV catalog.

How severe is CVE-2026-88622?

CVE-2026-88622 has a CVSS 3.1 base score of 8.8, rated high.

How do I fix CVE-2026-88622?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2026-88622 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.