How do I check whether I am affected by CVE-2026-97627?

Look up the model and firmware version in the DVR's system info screen. Affected: ADX5004/5008/ADX404/ADX3004/3008/3016/ADX204 with firmware before Ver.10.8.237; ADX1004/1008/ADX2016 on any version. ADX5016 is not affected.

What is the fix for CVE-2026-97627?

Upgrade ADX5004/5008/404/3004/3008/3016/204 to firmware Ver.10.8.237 (e.g. ndvr_adx5004_10.8.237.dax, edvr_adx3004_10.8.237.dat; download from the Atsumi notice). ADX1004/1008/2016 are end of sale with no fix: run them with no network connection, or replace them with a current model. Until patched, keep the DVR off the internet and change the admin password.

Who is not affected by CVE-2026-97627?

Not affected if: adx5016, auth-required, no-admin-accounts-exposed, no-network-connection.

Live › vulnerability › CVE-2026-97627

Go to dashboard

high8.6Infrastructure

Atsumi Electric DVRs: hidden feature lets an admin run OS commands

Atsumi Electric ADX-series EX-SDI/network DVRs ship an undocumented maintenance service, reachable over the network, that lets an administrator-level user run arbitrary OS commands (CWE-912). A second one in the same advisory (CVE-2026-100737) allows upgrading to unauthorized firmware. Needs the admin password. Found by NICT/NICTER. CVSS 3.0 7.2, 4.0 8.6.

Summary written from the sources below. Check the originals before acting.

CVSS 4.0

8.6

high

scored by [email protected]

known so far5 of 6

missing: exploitation

First public: Oct 20, 2026 UTC
Last modified: Oct 24, 2026
Status: open
Known exploitation: None reported
Public exploit: None on GitHub
EPSS: not scored

First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.

Why it is high, and not just CVSS

Likelihood → · Impact ↓

critical

high

medium

high

medium

low

medium

low

Exploited: No reports yet.
Needs login: Yes.
Needs a special setup: Not known from the sources.
Reachable from: Not known from the sources.
Worst case: Admin account gains operating system command execution on the recorder.
CVSS said: 8.6. The facts above say medium; we keep the sources' high until an analyst looks.

Who is affected

2 products

Know the next one before it finds you.

Add to Slack

Live › vulnerability › CVE-2026-97627

Go to dashboard

high8.6Infrastructure

Atsumi Electric DVRs: hidden feature lets an admin run OS commands

Summary written from the sources below. Check the originals before acting.

CVSS 4.0

8.6

high

scored by [email protected]

known so far5 of 6

missing: exploitation

First public: Oct 20, 2026 UTC
Last modified: Oct 24, 2026
Status: open
Known exploitation: None reported
Public exploit: None on GitHub
EPSS: not scored

First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.

Why it is high, and not just CVSS

Likelihood → · Impact ↓

critical

high

medium

high

medium

low

medium

low

Exploited: No reports yet.
Needs login: Yes.
Needs a special setup: Not known from the sources.
Reachable from: Not known from the sources.
Worst case: Admin account gains operating system command execution on the recorder.
CVSS said: 8.6. The facts above say medium; we keep the sources' high until an analyst looks.

Who is affected

2 products

Know the next one before it finds you.

Add to Slack

Product	Ecosystem	Affected	Fixed in
ADX5004/ADX5008/ADX404/ADX3004/ADX3008/ADX3016/ADX204	vendor	< 10.8.237	10.8.237
ADX1004/ADX1008/ADX2016	vendor	all versions	–

Atsumi Electric DVRs: hidden feature lets an admin run OS commands

Why it is high, and not just CVSS

Who is affected

Know the next one before it finds you.

Atsumi Electric DVRs: hidden feature lets an admin run OS commands

Why it is high, and not just CVSS

Who is affected

Know the next one before it finds you.

How to check

The fix

Who had it, and when

What the sources say, verbatim

Sources