TVT vendor intelligence

TVT Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting TVT products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Browse TVT KEVs Full KEV feed

Total KEVs: 4; Known exploited vulnerabilities affecting TVT products
In CISA KEV: 1; Records also listed in the official catalog
Beyond CISA KEV: 3; Additional exploited CVEs absent from CISA KEV
Sensor Observed: 0; TVT KEVs with sensor-observed exploitation activity

The catalog gap matters for TVT exposure

Three of the four exploited TVT CVEs tracked here are not in CISA KEV. Teams relying on the official catalog alone would miss three-quarters of this vendor portfolio.

25%
Covered by CISA: 75%
Beyond CISA: 4
Product families

Attested TVT CVEs

Search the exploited-vulnerability portfolio, then narrow it to official CISA coverage or the additional records KEV Intelligence tracks beyond the catalog.

How exploitation is verified

CVE / description	Product	Confidence	CISA KEV	Added
CVE-2025-34036 Shenzhen TVT CCTV-DVR Command Injection	CCTV-DVR	High	Beyond CISA	10 Jan 2026
CVE-2024-7339 TVT DVR TD-2104TS-CL queryDevInfo information disclosure	DVR TD-2104TS-CL, DVR TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5L(MM), AVISION DVR AV108T	High	Beyond CISA	15 Aug 2025
CVE-2018-25126 TVT NVMS-9000 Hard-coded API Credentials & Command Injection	NVMS-9000	High	Beyond CISA	24 Nov 2025
CVE-2019-20085 TVT NVMS-1000 devices allow GET /.. Directory Traversal	NVMS-1000	Confirmed	In CISA	03 Nov 2021

Showing 4 of 4 TVT known exploited vulnerabilities.

Recurring weakness patterns

Neutralization, exposure, and limitation account for four mapped occurrences across this TVT KEV portfolio.

Browse all KEVs →

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-798

Use of Hard-coded Credentials

Early warning alerts

Get alerts on high-impact exploitation

Receive curator-selected alerts when exploitation activity warrants attention. Each alert includes the evidence and context needed to decide what requires attention now.