hikvision

Latest CVEs · RSS

• CVE-2026-85543 2026-09-10 · CVSS 4.3
  Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged users to obtain device Wi
• CVE-2026-85545 2026-09-10 · CVSS 7.1
  There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that their role is not authori
• CVE-2026-85544 2026-09-10 · CVSS 6.1
  Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within t
• CVE-2026-16843 2026-07-31 · CVSS 7.2
  Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can
• CVE-2026-61392 2026-07-22 · CVSS 5.3
  There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information from the device’s me
• CVE-2026-61391 2026-07-22 · CVSS 7.2
  There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction by sending s
• CVE-2026-61390 2026-07-22 · CVSS 7.7
  There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specia
• CVE-2026-57600 2026-07-22 · CVSS 7.5
  Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data.
• CVE-2026-57599 2026-07-22 · CVSS 6.6
  There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the device program, attackers can escalate pr
• CVE-2026-32684 2026-05-12 · CVSS 2.9
  The application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications could obtain sensiti
• CVE-2026-32683 2026-05-09 · CVSS 5.3
  Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces, which pose a data transmission risk. Attackers can exploit this
• CVE-2026-3828 2026-05-09 · CVSS 7.2
  Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command execution due to insufficient input validation.
• CVE-2026-1749 2026-05-09 · CVSS 6.8
  There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission.
• CVE-2026-22626 2026-01-30 · CVSS 4.9
  Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal device behavior by craft
• CVE-2026-22625 2026-01-30 · CVSS 4.6
  Improper handling of filenames in certain HIKSEMI NAS products may lead to the exposure of sensitive system files.
• CVE-2026-22624 2026-01-30 · CVSS 4.3
  Due to inadequate access control, authenticated users of certain HIKSEMI NAS products can manipulate other users' file resources without proper authorization.
• CVE-2026-22623 2026-01-30 · CVSS 7.2
  Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can execute arbitrary commands on the devic
• CVE-2026-0709 2026-01-30 · CVSS 7.2
  Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials c
• CVE-2025-66177 2026-01-13 · CVSS 8.8
  There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same l
• CVE-2025-66176 2026-01-13 · CVSS 8.8
  There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same
• CVE-2025-66174 2025-12-19 · CVSS 6.5
  There is an improper authentication vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an a
• CVE-2025-66173 2025-12-19 · CVSS 6.2
  There is a privilege escalation vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attac
• CVE-2023-28815 2025-10-17 · CVSS 9.8
  Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may exp
• CVE-2023-28814 2025-10-17 · CVSS 9.8
  Some versions of Hikvision's iSecure Center Product have an improper file upload control vulnerability. Due to the improper verification of file to be uploaded,
• CVE-2025-39247 2025-08-29 · CVSS 8.6
  There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission.