CVE-2026-0853 A-Plus Video Technologies｜NVR - Sensitive Data Exposure
Unauthenticated remote attackers can access the debug page to obtain sensitive device status information on A-Plus Video Technologies NVRs.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-0853?
CVE-2026-0853 is a medium-severity vulnerability in A-Plus Video Technologies AP-BS404, published on 12 Jan 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Certain NVR models developed by A-Plus Video Technologies has a Sensitive Data Exposure vulnerability, allowing unauthenticated remote attackers to access the debug page and obtain device status information.
Weakness: CWE-497
Which versions are affected by CVE-2026-0853?
How do I fix CVE-2026-0853?
No fix has been published for CVE-2026-0853 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-0853 being exploited?
There is no known exploitation of CVE-2026-0853 in the wild and no public exploit code.
Sources
Also known as GHSA-mqqc-qq8p-5w3r.