Hikvision HikCentral Professional

• CVE-2026-1749 Medium 6.8 There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission. 0.3%
• CVE-2025-39247 High 8.6 There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission. 0.5%
• CVE-2024-47487 High 7.2 There is a SQL injection vulnerability in some HikCentral Professional versions. This could allow an authenticated user to execute arbitrary SQL queries. 0.5%
• CVE-2024-25064 Medium 4.3 Due to insufficient server-side validation, an attacker with login privileges could access certain resources that the attacker should not have access to by changing parameter values. 0.4%
• CVE-2024-25063 High 7.5 Due to insufficient server-side validation, a successful exploit of this vulnerability could allow an attacker to gain access to certain URLs that the attacker should not have access to. 0.6%