QVIS NVR DVR prior to 2021-12-13 is vulnerable to Remote Code Execution via Java deserialization.
qvis dvr_firmware
qvis nvr_firmware