https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T09:43:21.079423+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-123996 CVE-2026-123996 — Hisense VIDAA Smart TV UPnP/DLNA Missing Authentication 2026-11-09T09:43:21.081423+00:00

Affected: Hisense VIDAA

Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains a missing authentication vulnerability in the UPnP/DLNA RenderingControl service on TCP port 38400 that allows a LAN-adjacent attacker to issue SetVolume, SetMute, and SelectPreset(FactoryDefaults) commands after a one-time DLNA pairing with no per-command authentication or session token. Attackers can send a continuous loop of unauthenticated commands to override the physical remote, change volume and mute, and reset all picture and audio calibration settings.