CVE-2020-36925 – Arteco Web Client DVR/NVR Session ID Brute Force Authentication Bypass

CVE ID : CVE-2020-36925

Published : Jan. 6, 2026, 3:52 p.m. | 34 minutes ago

Description : Arteco Web Client DVR/NVR contains a session hijacking vulnerability with insufficient session ID complexity that allows remote attackers to bypass authentication. Attackers can brute force session IDs within a specific numeric range to obtain valid sessions and access live camera streams without authorization.

Severity: 9.8 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…