HHikvision

Products

Exploited and recent CVEs

• CVE-2026-85543 Medium 4.3 Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged users to obtain device Wi-Fi configuration information through th 0.3%
• CVE-2026-85545 High 7.1 There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that their role is not authorized to access. 0.3%
• CVE-2026-85544 Medium 6.1 Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attacker 0.4%
• CVE-2026-85544 Medium 6.1 Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attacker 0.4%
• CVE-2026-85544 Medium 6.1 Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attacker 0.4%
• CVE-2026-85544 Medium 6.1 Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attacker 0.4%
• CVE-2026-85544 Medium 6.1 Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attacker 0.4%
• CVE-2026-85544 Medium 6.1 Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attacker 0.4%
• CVE-2026-85544 Medium 6.1 Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attacker 0.4%
• CVE-2026-85544 Medium 6.1 Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attacker 0.4%
• CVE-2026-85544 Medium 6.1 Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attacker 0.4%
• CVE-2026-85544 Medium 6.1 Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attacker 0.4%
• CVE-2026-85544 Medium 6.1 Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attacker 0.4%
• CVE-2026-85544 Medium 6.1 Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attacker 0.4%
• CVE-2026-85544 Medium 6.1 Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attacker 0.4%
• CVE-2026-16843 High 7.2 Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted pac 0.9%
• CVE-2026-16843 High 7.2 Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted pac 0.9%
• CVE-2026-16843 High 7.2 Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted pac 0.9%
• CVE-2026-16843 High 7.2 Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted pac 0.9%
• CVE-2026-16843 High 7.2 Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted pac 0.9%
• CVE-2026-16843 High 7.2 Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted pac 0.9%
• CVE-2026-16843 High 7.2 Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted pac 0.9%
• CVE-2026-16843 High 7.2 Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted pac 0.9%
• CVE-2026-16843 High 7.2 Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted pac 0.9%
• CVE-2026-16843 High 7.2 Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted pac 0.9%
• CVE-2026-61392 Medium 5.3 There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information from the device’s memory. 0.3%
• CVE-2026-61392 Medium 5.3 There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information from the device’s memory. 0.3%
• CVE-2026-61391 High 7.2 There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction by sending specially crafted packets. 0.5%
• CVE-2026-61391 High 7.2 There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction by sending specially crafted packets. 0.5%
• CVE-2026-61390 High 7.7 There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets. 0.4%