CVE-2026-0853

Summary

Certain NVR models developed by A-Plus Video Technologies has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access the debug page and obtain device status information.

Affected Software

VendorProductVersion RangeStatus
A-Plus Video TechnologiesAP-RM864P0 <= 2.1.0affected
A-Plus Video TechnologiesAP-RM8640 <= 2.1.0affected
A-Plus Video TechnologiesAP-RM832P0 <= 2.1.0affected
A-Plus Video TechnologiesAP-RM8320 <= 2.1.0affected
A-Plus Video TechnologiesAP-RM8160 <= 2.1.0affected
A-Plus Video TechnologiesAP-BS4160 <= 2.1.0affected
A-Plus Video TechnologiesAP-BS4080 <= 2.1.0affected
A-Plus Video TechnologiesAP-BS4040 <= 2.1.0affected

Weaknesses

  • CWE-497: CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References