---
id: CVE-2026-97627
title: >-
  Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders)
  provided by Atsumi Electric Co., Ltd
summary: >-
  Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders)
  provided by Atsumi Electric Co., Ltd. A user who can log in to the product
  with the administrator privilege may execute arbitrary OS commands.
severity: high
cvss: 7.2
cvssVector: 'CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-912
vendor: 'Atsumi Electric Co., Ltd.'
product: ADX5004
affected:
  - ADX5004 < Ver.10.8.237
  - ADX5008 < Ver.10.8.237
  - ADX404 < Ver.10.8.237
  - ADX3004 < Ver.10.8.237
  - ADX3008 < Ver.10.8.237
  - ADX3016 < Ver.10.8.237
  - ADX204 < Ver.10.8.237
  - ADX1004 all versions
  - ADX1008 all versions
  - ADX2016 all versions
published: '2026-10-20'
updated: '2026-10-20'
sourceUpdated: '2026-10-20T05:28:49.312Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-97627'
references:
  - url: 'https://www.atsumi.co.jp/info-20261005.html'
  - url: 'https://jvn.jp/en/jp/JVN88864366/'
tags:
  - cve.org
ingestedAt: '2026-10-20T05:53:39.301Z'
---

## Overview

Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may execute arbitrary OS commands.

## Affected

- `ADX5004 < Ver.10.8.237`
- `ADX5008 < Ver.10.8.237`
- `ADX404 < Ver.10.8.237`
- `ADX3004 < Ver.10.8.237`
- `ADX3008 < Ver.10.8.237`
- `ADX3016 < Ver.10.8.237`
- `ADX204 < Ver.10.8.237`
- `ADX1004 all versions`
- `ADX1008 all versions`
- `ADX2016 all versions`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.