Search

Find a vulnerability

Search criteria

    1 vulnerability found for (multiple product) by TOA Corporation

    JVNDB-2026-000007

    Vulnerability from jvndb - Published: 2026-01-16 15:06 - Updated:2026-01-16 15:06
    Severity
    Summary
    Multiple Vulnerabilities in TOA Network Cameras TRIFORA 3 series
    Details
    Network Cameras TRIFORA 3 series provided by TOA Corporation contain multiple vulnerabilities listed below.
    • OS command injection (CWE-78) - CVE-2026-20759
    • Cross-site scripting (CWE-79) - CVE-2026-20894
    • Path traversal (CWE-22) - CVE-2026-22876
    Shogo Iyota of GMO Cybersecurity by Ierae reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
    Impacted products
    Show details on JVN DB website

    {
      "@rdf:about": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-000007.html",
      "dc:date": "2026-01-16T15:06+09:00",
      "dcterms:issued": "2026-01-16T15:06+09:00",
      "dcterms:modified": "2026-01-16T15:06+09:00",
      "description": "Network Cameras TRIFORA 3 series provided by TOA Corporation contain multiple vulnerabilities listed below.\u003cul\u003e\u003cli\u003eOS command injection (CWE-78) - CVE-2026-20759\u003c/li\u003e\u003cli\u003eCross-site scripting (CWE-79) - CVE-2026-20894\u003c/li\u003e\u003cli\u003ePath traversal (CWE-22) - CVE-2026-22876\u003c/li\u003e\u003c/ul\u003eShogo Iyota of GMO Cybersecurity by Ierae reported these vulnerabilities to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
      "link": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-000007.html",
      "sec:cpe": {
        "#text": "cpe:/a:misc:multiple_product",
        "@product": "(multiple product)",
        "@vendor": "TOA Corporation",
        "@version": "2.2"
      },
      "sec:cvss": {
        "@score": "8.8",
        "@severity": "High",
        "@type": "Base",
        "@vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "@version": "3.0"
      },
      "sec:identifier": "JVNDB-2026-000007",
      "sec:references": [
        {
          "#text": "https://jvn.jp/en/jp/JVN08087148/index.html",
          "@id": "JVN#08087148",
          "@source": "JVN"
        },
        {
          "#text": "https://www.cve.org/CVERecord?id=CVE-2026-20759",
          "@id": "CVE-2026-20759",
          "@source": "CVE"
        },
        {
          "#text": "https://www.cve.org/CVERecord?id=CVE-2026-20894",
          "@id": "CVE-2026-20894",
          "@source": "CVE"
        },
        {
          "#text": "https://www.cve.org/CVERecord?id=CVE-2026-22876",
          "@id": "CVE-2026-22876",
          "@source": "CVE"
        },
        {
          "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
          "@id": "CWE-22",
          "@title": "Path Traversal(CWE-22)"
        },
        {
          "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
          "@id": "CWE-78",
          "@title": "OS Command Injection(CWE-78)"
        },
        {
          "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
          "@id": "CWE-79",
          "@title": "Cross-site Scripting(CWE-79)"
        }
      ],
      "title": "Multiple Vulnerabilities in TOA Network Cameras TRIFORA 3 series"
    }