CVE-2026-15680— Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability
Possible ATT&CK Techniques 2AI
T1195 · Supply Chain Compromise T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-15680
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi Security Cameras. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of JSON requests in the sonia binary. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-25884.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用外部控制的格式字符串
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Lorex | 2K Indoor Wi-Fi Security Camera | 2.800.020000000.3.R.20220331 | - |
II. Public POCs for CVE-2026-15680
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-15680
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-15680 (1)
- 🔗 ZDI-26-398 - TrendAI™ Zero Day Initiative™ (ZDI)x_research-advisory
IV. Related Vulnerabilities
Same product: 2K Indoor Wi-Fi Security Camera
- CVE-2026-15683
Lorex 2K Indoor Wi-Fi Security Camera Device Management Serv - CVE-2024-52548
Lorex 2K Indoor Wi-Fi Security Camera - Code signing bypass - CVE-2024-52547
Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflo - CVE-2024-52546
Lorex 2K Indoor Wi-Fi Security Camera - Null pointer derefer - CVE-2024-52545
Lorex 2K Indoor Wi-Fi Security Camera - Out of bounds heap r
Same vendor: Lorex
- CVE-2026-15683
Lorex 2K Indoor Wi-Fi Security Camera Device Management Serv - CVE-2024-52548
Lorex 2K Indoor Wi-Fi Security Camera - Code signing bypass - CVE-2024-52547
Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflo - CVE-2024-52546
Lorex 2K Indoor Wi-Fi Security Camera - Null pointer derefer - CVE-2024-52545
Lorex 2K Indoor Wi-Fi Security Camera - Out of bounds heap r
Same weakness: CWE-134
- CVE-2026-46465
Dell PowerProtect Data Domain 格式化字符串错误漏洞 - CVE-2026-57877
GV-LPC2011/LPC2211 - unauthorized format string vulnerabilit - CVE-2026-10828
Moxa NPort W2150A-W4/W2250A-W4 Series 格式化字符串错误漏洞 - CVE-2026-12174
D-Link DCS-935L HTTP rhea snprintf format string - CVE-2026-6250
Authenticated Format String Injection on TP-Link Tapo C110
V. Comments for CVE-2026-15680
No comments yet