Skip to main content

EUVDEUVD-2026-79953

| CVE-2026-66372 HIGH
Predictable Seed in Pseudo-Random Number Generator (PRNG) (CWE-337)
2026-09-15 ics-cert@hq.dhs.gov GHSA-gq5q-45hh-68cr
Information Disclosure
7.6
CVSS 4.0 · Vendor: hq
Share

Severity by source

Vendor (hq) PRIMARY
7.6 HIGH
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (hq) · only source for this CVE.

CVSS VectorVendor: hq

Attack Vector
Adjacent
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Sep 15, 2026 - 21:42 vuln.today
CVE Published
Sep 15, 2026 - 21:16 cve.org
HIGH 7.6

DescriptionCVE.org

The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding token entropy to the seed space.

AnalysisAI

Predictable web session tokens in Digital Watchdog VMAX A1 G4 DVR, VMAX A1 PLUS, VA1G4/VG4 Recorders and VMAX IP G4 NVR devices allow an attacker positioned on the same network segment to derive valid session identifiers and impersonate authenticated users of the device web interface. The underlying weakness (CWE-337) is a PRNG seeded with insufficient entropy, which bounds the token space to the seed space rather than to a cryptographically large keyspace. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Threat intelligence, references, and detailed analysis are available after sign-in.

Same weakness CWE-337 – Predictable Seed in Pseudo-Random Number Generator (PRNG)

View all
CVE-2024-7558 HIGH POC
8.0
CVE-2026-26018 HIGH POC
7.5
CVE-2022-26852 CRITICAL
9.8
CVE-2023-49343 HIGH
7.8
CVE-2026-25235 HIGH
7.5
CVE-2025-55069 HIGH
8.7
CVE-2025-20613 LOW
2.0
CVE-2025-7770 HIGH
8.7

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

EUVD-2026-79953 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy