Topic

Physical Security: news, advisories and analysis

5 articlesUpdated 1 Oct 2026

CyberSecureToday covers Physical Security across 5 articles published between 19 Sep 2026 and 1 Oct 2026. The coverage includes 5 vulnerability advisories. 5 advisories are rated critical or high severity.

Stories on Physical Security most often intersect with Industrial OT, Command Injection and CCTV, with Industrial, OT & IoT the most affected sector. The most recent story, “Anjvision Industrial Video Streaming Transcoders Compromised by Critical Unauthenticated Command Injection (CVE-2026-100291)”, was published 1 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsIndustrial & OTCritical
Anjvision Industrial Video Streaming Transcoders Compromised by Critical Unauthenticated Command Injection (CVE-2026-100291)
CISA advisory ICSA-26-272-05 exposes critical unauthenticated command injection and credential disclosure vulnerabilities across Anjvision streaming transcoders.
CST Editorial Desk1 Oct 20269 min read
ThreatsIndustrial & OTCritical
VIVOTEK Network Camera Firmware Vulnerability Enables Unauthenticated Remote Command Execution (CVE-2026-22755)
CISA issues ICSA-26-272-03 warning of a critical command injection flaw in VIVOTEK industrial camera firmware enabling physical security stream hijacking.
Mei-Lin Chen1 Oct 202610 min read
ThreatsIndustrial & OTCritical
Siemens Siveillance Control File Upload Flaw Grants Unauthenticated Root Access
Siemens patches critical CVSS 9.0 flaw CVE-2026-50093 in Siveillance Control OIS web service, enabling unauthenticated remote attackers to obtain root privileges.
CST Editorial Desk23 Sep 202615 min read
ThreatsIndustrial & OTCritical
Digital Watchdog VMAX Recorder Flaws Enable Unauthenticated Remote Root Takeover
CISA releases advisory ICSA-26-258-01 warning of critical vulnerabilities in Digital Watchdog VMAX DVR and NVR recorders allowing unauthenticated remote root code execution.
Mei-Lin Chen20 Sep 202612 min read
ThreatsIndustrial & OTCritical
Johnson Controls C-CURE 9000 Vulnerabilities Allow Attackers to Hijack Physical Facility Access Gateways
Johnson Controls and CISA release emergency advisory ICSA-26-204-01 for C-CURE 9000 and victor application servers resolving critical code execution flaw CVE-2026-21655.
Mei-Lin Chen19 Sep 202613 min read

Latest coverage

Anjvision Industrial Video Streaming Transcoders Compromised by Critical Unauthenticated Command Injection (CVE-2026-100291)

VIVOTEK Network Camera Firmware Vulnerability Enables Unauthenticated Remote Command Execution (CVE-2026-22755)

Siemens Siveillance Control File Upload Flaw Grants Unauthenticated Root Access

Digital Watchdog VMAX Recorder Flaws Enable Unauthenticated Remote Root Takeover

Johnson Controls C-CURE 9000 Vulnerabilities Allow Attackers to Hijack Physical Facility Access Gateways