Your NVR's Admin Password, In Plaintext, To Anyone Who Can Reach It (Digital Watchdog VMAX)
CISA advisory ICSA-26-258-01 covers six CVEs across the entire Digital Watchdog VMAX DVR/NVR line — all versions affected. An unauthenticated request can hand over your admin credentials in plaintext, and a hard-coded credential scores 9.6.