Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Digiever DS-2105 Pro actively exploited command injection RCE (CVE-2023-52163)

Vulnerability
First reported
Last updated
Happening score
H score 39
1 unique sources, 1 articles

Summary

Hide ▲

Digiever DS-2105 Pro NVRs are exposed to CVE-2023-52163, a post-authentication command injection flaw that can lead to remote code execution and has been actively exploited. CISA added the vulnerability to the KEV catalog, underscoring real-world risk for organizations still running the affected devices. The flaw remains unpatched because the product is end-of-life, so exposure reduction and access restrictions are the main defenses.

Related Happenings

Magento exploitation wave for CVE-2026-45247

Exploitation Wave
H score9 First: 04.06.2026 10:19 Last: 04.06.2026 10:19 Sources 1

About this happening: Active exploitation of **CVE-2026-45247** is hitting **Mirasvit Cache Warmer** on **Magento** stores, with malicious requests carrying serialized PHP payloads that can lead to **r...

Open Happening

CISA KEV remediation for Android and Linux vulnerabilities

Advisory/Mitigation
H score57 First: 03.06.2026 18:36 Last: 03.06.2026 18:36 Sources 1

About this happening: CISA’s **KEV** update forced **federal agencies** to remediate **CVE-2025-48595** and **CVE-2022-0492** in **Android** and the **Linux kernel** before the **June 5** deadline, or...

Open Happening

PAN-OS GlobalProtect CVE-2026-0257 exploitation wave

Exploitation Wave
H score18 First: 01.06.2026 11:30 Last: 01.06.2026 11:30 Sources 1

About this happening: A **CVE-2026-0257** exploitation wave is hitting **Palo Alto Networks PAN-OS GlobalProtect** appliances, creating **unauthorized VPN access** risk for **multiple customers**. **Ra...

Open Happening

ChromaDB Python API exposure mitigation (CVE-2026-45829)

Advisory/Mitigation
H score25 First: 20.05.2026 01:25 Last: 20.05.2026 01:25 Sources 1

About this happening: **HiddenLayer** urged **ChromaDB** users to harden exposed deployments because **CVE-2026-45829** can still enable code execution on the **Python FastAPI** server. Until patch sta...

Open Happening

CISA KEV order for CVE-2026-3055 on Citrix appliances

Public Sector Action
H score34 First: 31.03.2026 10:05 Last: 31.03.2026 10:05 Sources 1

About this happening: CISA added **CVE-2026-3055** to the **KEV Catalog** and ordered **FCEB agencies** to secure **Citrix NetScaler** appliances by **Thursday, April 2**, turning an **actively exploit...

Open Happening

Timeline

  1. 25.12.2025 10:07 2 articles · 6mo ago

    CISA adds actively exploited Digiever DS-2105 Pro flaw to KEV catalog

    Initial Disclosure

    CISA added CVE-2023-52163 affecting Digiever DS-2105 Pro network video recorders to the Known Exploited Vulnerabilities catalog after evidence of active exploitation. The flaw is a missing authorization issue in time_tzsetup.cgi that can enable command injection and post-authentication remote code execution, and reports from Akamai and Fortinet said threat actors used it to deliver Mirai and ShadowV2. TXOne Research said the related CVE-2023-52164 file-read flaw also remains unpatched because the device is end-of-life, and CISA advised avoiding internet exposure, changing default credentials, and for Federal Civilian Executive Branch agencies applying mitigations or discontinuing use by January 12, 2025.

    Show sources
    Open in new tab