https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T09:15:29.658097+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-123997 CVE-2026-123997 — Hisense VIDAA Smart TV Unauthenticated DoS via SetAVTransportURI 2026-11-09T09:15:29.659567+00:00

Affected: Hisense VIDAA

Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated denial-of-service vulnerability in the UPnP/DLNA AVTransport SOAP service that allows LAN-adjacent attackers to freeze the entire television software layer by sending a crafted SetAVTransportURI request on TCP port 38400. Attackers can exploit this flaw without credentials to render the device completely unresponsive to remote control or front-panel input, requiring a physical power cycle to restore functionality.