CVE-2016-20016Vulnerability
Reported by 4 independent sources · first reported by GreyNoise · last reported
Last reported 19 days ago
What the reports say
4 reports, newest first · the exact sentence from each-
ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure“CVE-2016-20016: (43737) JAWS.DVR.CCTV.Shell.Unauthenticated.Command.Execution”
-
Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2“MVPower CCTV DVR RCE (CVE-2016-20016)”
-
July 2026 CVE Landscape“CVE-2016-20016”
-
GreyNoise 2025 Mass Internet Exploitation Report: Attackers Are Moving Faster Than Ever — Are You Ready?“CVE-2016-20016 (MVPower CCTV DVR RCE) – 17,496 unique IPs”
Indicators reported together
named in the same reportsAlso named with it: CVE-2014-8361, CVE-2021-35394, CVE-2023-26801, CVE-2023-41011, CVE-2024-3721, CVE-2025-34037, CVE-2025-49113, CVE-2026-33824, CVE-2024-42009, CVE-2026-15409, CVE-2026-15410, CVE-2026-25089, CVE-2026-39808, CVE-2026-42897, CVE-2025-55182, CVE-2018-0802, CVE-2026-50522, CVE-2026-58644, CVE-2025-3248, CVE-2008-4128
Thanks — we review every report.