Nuuo Cms

cpe:2.3:*:nuuo:nuuo_cms

Vendor: NUUO
Device type: Not derivable from CPE
Published vulnerabilities: 7
In CISA KEV: None
Affected versions recorded: 2
Data last built: 5 September 2026

Security summary

7 published vulnerabilities affect this product according to NVD.

Experimental risk indicator

Components are shown separately and deliberately not combined into a single number. Two of the six inputs below have no public source for any product on this site; a composite built without them would be a guess wearing a decimal point.

Known vulnerability count 7 bar scaled to 20

Highest published severity 9.8 CRITICAL

Confirmed exploitation no none listed in KEV

Exploitation probability EPSS 60.8% (highest)

Lifecycle status no source

Deployed exposure not measurable from public data

Published vulnerabilities

CVE	Published	CVSS	Severity	EPSS	Flags
CVE-2018-18982	2018-11-27	8.8	high	60.8%	Exploit ref
CVE-2018-17936	2018-11-27	9.8	critical	15.3%
CVE-2018-17934	2018-11-27	9.8	critical	19.7%
CVE-2018-17894	2018-10-12	9.8	critical	2.4%	Vendor advisory
CVE-2018-17892	2018-10-12	8.8	high	2.8%	Vendor advisory
CVE-2018-17890	2018-10-12	9.8	critical	3.3%	Vendor advisory
CVE-2018-17888	2018-10-12	9.8	critical	29.6%	Vendor advisory

Affected versions

Version strings recorded by NVD against this product. These are the versions named in CPE match rules, not a complete firmware history — a version absent here has not been cleared, it has simply never been named in a CVE record.

Ranges: <= 3.1 · <= 3.3

What this page does not tell you

There is no public dataset of end-of-support dates, default credentials or shipped network services for this product, so those fields are absent rather than estimated. Whether any of these vulnerabilities is exploitable in your deployment depends on firmware version, configuration and network position — none of which is knowable from here.

For the vendor's own advisories, see NUUO.

Other NUUO products

Nvrmini 2 (8)Nvrsolo (7)NVRMINI2 (5)Network Video Recorder (2)Crystal (1)NT-4040 TITAN (1)Nvrmini (1)NE-2020 (1)NE-2040 (1)NE-4080 (1)NE-4160 (1)

Vulnerability records from the National Vulnerability Database, matched to this product by CPE. Exploitation status from CISA KEV 2026.09.04. Exploitation probability from FIRST EPSS, 2026-09-04. Product name derived mechanically from the CPE identifier. See methodology.