Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-0854
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Merit LILIN｜NVR - OS Command Injection
Source: NVD (National Vulnerability Database)
Vulnerability Description
Certain DVR/NVR models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Merit LILIN DVR Series和Merit LILIN NVR Series 操作系统命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Merit LILIN DVR Series和Merit LILIN NVR Series都是中国台湾利凌（Merit LILIN）公司的产品。Merit LILIN DVR Series是一系列数字视频录像机。Merit LILIN NVR Series是一系列网络视频录像机。 Merit LILIN DVR Series和Merit LILIN NVR Series存在操作系统命令注入漏洞，该漏洞源于OS命令注入，可能导致经过身份验证的远程攻击者注入任意OS命令并在设备上执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
Merit LILINDH032 0 ~ 1.0.28.3858 -
Merit LILINDVR708 0 ~ 1.3.4 -
Merit LILINDVR716 0 ~ 1.3.4 -
Merit LILINDVR804 0 ~ 1.3.4 -
Merit LILINDVR808 0 ~ 1.3.4 -
Merit LILINDVR816 0 ~ 1.3.4 -
Merit LILINNVR100L 0 ~ 1.1.66 -
Merit LILINNVR200L 0 ~ 1.1.66 -
Merit LILINNVR400L 0 ~ 1.1.66 -
Merit LILINNVR1400L 0 ~ 1.1.66 -
Merit LILINNVR2400L 0 ~ 1.1.66 -
Merit LILINNVR3216 0 ~ 2.0.74.3921 -
Merit LILINNVR3416 0 ~ 2.0.74.3921 -
Merit LILINNVR3416r 0 ~ 2.0.74.3921 -
Merit LILINNVR3816 0 ~ 2.0.74.3921 -
Merit LILINNVR5832 0 ~ 4.0.24.4043 -
Merit LILINNVR5832S 0 ~ 4.0.24.4043 -
Merit LILINNVR5104E 0 ~ 4.0.24.4078 -
Merit LILINNVR5208E 0 ~ 4.0.24.4078 -
Merit LILINNVR5416E 0 ~ 4.0.24.4078 -
II. Public POCs for CVE-2026-0854
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2026-0854
Please Login to view more intelligence information
IV. Related Vulnerabilities
Same vendor: Merit LILIN
Same weakness: CWE-78
V. Comments for CVE-2026-0854

No comments yet

Leave a comment