{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:33.428Z","products":["vacron"],"actNowTotal":0,"results":[{"query":"vacron","matched":1,"actNow":0,"events":[{"id":"early-cve-2025-34043","url":"https://securitythreatpulse.com/events/early-cve-2025-34043","title":"Vacron Network Video Recorder (NVR): attackers can run their own code","verdict":"watch","verdictReason":"Attack attempts are confirmed, with no confirmed exploitation yet.","tier":null,"rankScore":1,"rankWhy":["The first report is 20 days old."],"rulesVersion":"v3","ladder":{"talk":"none","damage":"none","attempts":"confirmed","exposure":"none","exploited":"none"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2025-34043"],"vendor":"Vacron","product":"Network Video Recorder (NVR)","affectedProducts":[{"kind":"direct","slug":"vacron/networkvideorecordernvr","vendor":"Vacron","product":"Network Video Recorder (NVR)","evidence":["cna","cpe"],"vendorKey":"vacron","productKey":"networkvideorecordernvr"}],"category":{"id":"network-device","label":"Routers, cameras and devices","why":"Routers, cameras and recorders are often forgotten and rarely updated.","doThis":"Update it or replace it. Never leave its admin page open to the internet."},"summary":"A remote command injection vulnerability exists in Vacron Network Video Recorder (NVR) devices v1.4 due to improper input sanitization in the board.cgi script. The vulnerability allows unauthenticated attackers to pass arbitrary commands to the underlying operating system via crafted HTTP requests.","cvss":10,"epss":0.07505,"exploitMaturity":"poc","kevListed":false,"kevDateAdded":null,"kevDueDate":null,"firstSeenAt":"2026-10-22T00:00:00.000Z","updatedAt":"2026-11-11T00:00:06.173Z","newestEvidenceAt":"2026-10-23T00:00:00.000Z"}]}]}