CVE-2026-123993High· 8.8▾ TwilightHisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vulnerability where a QA build of the Google Cobalt browser engine exposes the WebDriver automation server on TCP port 4444 across all network interfac…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vulnerability where a QA build of the Google Cobalt browser engine exposes the WebDriver automation server on TCP port 4444 across all network interfaces without any authentication or pairing requirement. A LAN-adjacent attacker can connect to the exposed WebDriver service to execute arbitrary JavaScript, read and exfiltrate sensitive localStorage data including ACR telemetry, MAC addresses, ad-service credentials, and location data, inject persistent content onto the display, and access the window.hisense native bridge to perform filesystem read/write and system-state operations.
VIDAA 0000.01.00a.P0220Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-123996Medium· 4.6Hisense VIDAA Smart TV UPnP/DLNA Missing Authentication
CVE-2026-123995Medium· 4.6Hisense VIDAA Smart TV SSRF via SetAVTransportURI CurrentURI
CVE-2026-123994Medium· 6.3Hisense VIDAA Smart TV DIAL Service Unauthenticated Access
CVE-2026-123997Medium· 6.5Hisense VIDAA Smart TV Unauthenticated DoS via SetAVTransportURI
CVE-2026-123998High· 8.3Hisense VIDAA Smart TV MQTT Broker Authentication Bypass
CVE-2025-61777Critical· 9.4Flag Forge is a Capture The Flag (CTF) platform