Apeman Id71 vulnerabilities

CVE-2025-11126 [CRITICAL] CWE-259 CVE-2025-11126: A security flaw has been discovered in Apeman ID71 218.53.203.117. This vulnerability affects unknow A security flaw has been discovered in Apeman ID71 218.53.203.117. This vulnerability affects unknown code of the file /system/www/system.ini. The manipulation results in hard-coded credentials. The attack may be performed from remote. The exploit has been released to the public and may be exploited. The vendor was contacted early about this discl

CVE-2025-11852 [MEDIUM] CWE-287 CVE-2025-11852: A vulnerability was found in Apeman ID71 218.53.203.117. The impacted element is an unknown function A vulnerability was found in Apeman ID71 218.53.203.117. The impacted element is an unknown function of the file /onvif/device_service of the component ONVIF Service. Performing manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contact

CVE-2025-11851 [LOW] CWE-79 CVE-2025-11851: A vulnerability has been found in Apeman ID71 EN75.8.53.20. The affected element is an unknown funct A vulnerability has been found in Apeman ID71 EN75.8.53.20. The affected element is an unknown function of the file /set_alias.cgi. Such manipulation of the argument alias leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure