{"id":"CVE-2026-88622","aliases":["EUVD-2026-82975","GHSA-48mp-vg9r-4gx2"],"status":"published","title":"NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handle_import_privilege.php.","description":"NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handle_import_privilege.php.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-13","score":0.01086,"percentile":0.65777,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-77"],"published":"2026-09-18T00:00:00Z","modified":"2026-09-22T20:00:03Z","references":[{"url":"http://nuuo.com"},{"url":"https://gist.github.com/4o3-f0rb1dd3n/b03b435a7c6730a0c9586bcc7967d9b5"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88622"},{"url":"https://github.com/advisories/GHSA-48mp-vg9r-4gx2"}],"sources":{"cve":[{"id":"CVE-2026-88622","description":"NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handle_import_privilege.php.","status":"published","published":"2026-09-18T00:00:00Z","modified":"2026-09-18T14:23:46.959Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T13:41:53.237769Z"}],"euvd":[{"id":"EUVD-2026-82975","description":"NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handle_import_privilege.php.","status":"published","published":"2026-09-18T00:00:00Z","modified":"2026-09-18T14:23:46Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T17:28:08.898956Z"}],"ghsa":[{"id":"GHSA-48mp-vg9r-4gx2","title":"NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handle_import_privilege.php.","description":"NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handle_import_privilege.php.","status":"published","published":"2026-09-18T15:32:17Z","modified":"2026-09-18T15:32:23Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T15:12:10.152672Z"}],"nvd":[{"id":"CVE-2026-88622","description":"NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handle_import_privilege.php.","status":"published","published":"2026-09-18T14:19:02.48Z","modified":"2026-09-22T20:00:03.713Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:12:49.70655Z"}]}}