CVE-2026-0854

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2026
Source publication: Jan 12, 2026
Source updated: Jan 12, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Merit LILIN｜NVR - OS Command Injection

Certain DVR/NVR models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

DH032

Vendor: Merit LILIN
Product: DH032
Platforms: Unknown
Default status: unaffected

DH032 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	1.0.28.3858	None listed

DVR708

Vendor: Merit LILIN
Product: DVR708
Platforms: Unknown
Default status: unaffected

DVR708 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	1.3.4	None listed

DVR716

Vendor: Merit LILIN
Product: DVR716
Platforms: Unknown
Default status: unaffected

DVR716 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	1.3.4	None listed

DVR804

Vendor: Merit LILIN
Product: DVR804
Platforms: Unknown
Default status: unaffected

DVR804 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	1.3.4	None listed

DVR808

Vendor: Merit LILIN
Product: DVR808
Platforms: Unknown
Default status: unaffected

DVR808 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	1.3.4	None listed

DVR816

Vendor: Merit LILIN
Product: DVR816
Platforms: Unknown
Default status: unaffected

DVR816 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	1.3.4	None listed

NVR100L

Vendor: Merit LILIN
Product: NVR100L
Platforms: Unknown
Default status: unaffected

NVR100L · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	1.1.66	None listed

NVR200L

Vendor: Merit LILIN
Product: NVR200L
Platforms: Unknown
Default status: unaffected

NVR200L · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	1.1.66	None listed

NVR400L

Vendor: Merit LILIN
Product: NVR400L
Platforms: Unknown
Default status: unaffected

NVR400L · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	1.1.66	None listed

NVR1400L

Vendor: Merit LILIN
Product: NVR1400L
Platforms: Unknown
Default status: unaffected

NVR1400L · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	1.1.66	None listed

NVR2400L

Vendor: Merit LILIN
Product: NVR2400L
Platforms: Unknown
Default status: unaffected

NVR2400L · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	1.1.66	None listed

NVR3216

Vendor: Merit LILIN
Product: NVR3216
Platforms: Unknown
Default status: unaffected

NVR3216 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	2.0.74.3921	None listed

NVR3416

Vendor: Merit LILIN
Product: NVR3416
Platforms: Unknown
Default status: unaffected

NVR3416 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	2.0.74.3921	None listed

NVR3416r

Vendor: Merit LILIN
Product: NVR3416r
Platforms: Unknown
Default status: unaffected

NVR3416r · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	2.0.74.3921	None listed

NVR3816

Vendor: Merit LILIN
Product: NVR3816
Platforms: Unknown
Default status: unaffected

NVR3816 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	2.0.74.3921	None listed

NVR5832

Vendor: Merit LILIN
Product: NVR5832
Platforms: Unknown
Default status: unaffected

NVR5832 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	4.0.24.4043	None listed

NVR5832S

Vendor: Merit LILIN
Product: NVR5832S
Platforms: Unknown
Default status: unaffected

NVR5832S · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	4.0.24.4043	None listed

NVR5104E

Vendor: Merit LILIN
Product: NVR5104E
Platforms: Unknown
Default status: unaffected

NVR5104E · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	4.0.24.4078	None listed

NVR5208E

Vendor: Merit LILIN
Product: NVR5208E
Platforms: Unknown
Default status: unaffected

NVR5208E · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	4.0.24.4078	None listed

NVR5416E

Vendor: Merit LILIN
Product: NVR5416E
Platforms: Unknown
Default status: unaffected

NVR5416E · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	4.0.24.4078	None listed