CVE-2026-66372: Digital Watchdog VA1G4 Recorder

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding token entropy to the seed space.

Affected products

• Digital Watchdog VA1G4 Recorder: any version
• Digital Watchdog VG4 Recorder: any version
• Digital Watchdog Vmax a1 g4 Dvr: any version
• Digital Watchdog Vmax a1 Plus: any version
• Digital Watchdog Vmax IP g4 NVR: any version

Published 2026-09-15. Last modified 2026-09-18.