CVE-2026-123995Medium· 4.6▾ SunlitHisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an input validation vulnerability in the UPnP/DLNA AVTransport SOAP service that allows a LAN-adjacent attacker to inject arbitrary URIs via the CurrentURI field of SetAVTranspo…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 25.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.1%
Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an input validation vulnerability in the UPnP/DLNA AVTransport SOAP service that allows a LAN-adjacent attacker to inject arbitrary URIs via the CurrentURI field of SetAVTransportURI without validating the scheme, host, or media legitimacy. Attackers can supply schemes such as http://, file:///data/misc/wifi/, rtsp://, or smb:// to have the TV fetch and render attacker-controlled content after a one-time DLNA pairing, enabling phishing pages, fake firmware prompts, and fake emergency alerts to be displayed, with subsequent commands executing silently.
VIDAA 0000.01.00a.P0220Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-123996Medium· 4.6Hisense VIDAA Smart TV UPnP/DLNA Missing Authentication
CVE-2026-123993High· 8.8Hisense VIDAA Smart TV Unauthenticated WebDriver Remote Access
CVE-2026-123994Medium· 6.3Hisense VIDAA Smart TV DIAL Service Unauthenticated Access
CVE-2026-123997Medium· 6.5Hisense VIDAA Smart TV Unauthenticated DoS via SetAVTransportURI
CVE-2026-123998High· 8.3Hisense VIDAA Smart TV MQTT Broker Authentication Bypass
CVE-2025-61777Critical· 9.4Flag Forge is a Capture The Flag (CTF) platform