CVE-2026-0855: Merit Lilin Ipd

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Certain IP Camera models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device.

Affected products

• Merit Lilin Ipd: version 0 only
• Merit Lilin Ipr: version 0 only
• Merit Lilin Ld: version 0 only
• Merit Lilin Lr: version 0 only
• Merit Lilin p2: version 0 only
• Merit Lilin p3: version 0 only
• Merit Lilin p6: version 0 only
• Merit Lilin v1: version 0 only
• Merit Lilin z7: version 0 only

Published 2026-01-12. Last modified 2026-06-17.