Hikvision vulnerabilities
48 CVEs and advisories name Hikvision as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-85543Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged users
- CVE-2026-85545There is an Vulnerability in some HikCentral Access Control versions.
- CVE-2026-85544Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with
- CVE-2026-16843Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validation.
- CVE-2026-61392There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information
- CVE-2026-61391There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malf
- CVE-2026-61390There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfuncti
- CVE-2026-57600Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial s
- CVE-2026-57599There is a privilege escalation vulnerability in some Hikvision cameras.
- CVE-2026-32684The application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications
- CVE-2026-3828Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command execution due to insufficie
- CVE-2026-1749There is an Access Control Vulnerability in some HikCentral Professional versions.
- CVE-2026-0709Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation.
- CVE-2025-66177There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models.
- CVE-2025-66176There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products.
- CVE-2025-66174There is an improper authentication vulnerability in some Hikvision DVR products.
- CVE-2025-66173There is a privilege escalation vulnerability in some Hikvision DVR products.
- CVE-2024-58274Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2024-08-01 allows execution of a command within $( ) in /
- CVE-2023-53691Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2023-06-25 allows file upload via /center/api/files direc
- CVE-2023-28815Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerabilit
- CVE-2023-28814Some versions of Hikvision's iSecure Center Product have an improper file upload control vulnerability.
- CVE-2025-39247There is an Access Control Vulnerability in some HikCentral Professional versions.
- CVE-2025-39246There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions.
- CVE-2025-39245There is a CSV Injection Vulnerability in some HikCentral Master Lite versions.
- CVE-2025-34067Hikvision Integrated Security Management Platform Remote Command Execution via applyCT Fastjson
- CVE-2025-39240Some Hikvision Wireless Access Point are vulnerable to authenticated remote command execution due to insufficient input validation.
- CVE-2024-47486There is an XSS vulnerability in some HikCentral Master Lite versions.
- CVE-2024-47487There is a SQL injection vulnerability in some HikCentral Professional versions.
- CVE-2024-47485There is a CSV injection vulnerability in some HikCentral Master Lite versions.
- CVE-2024-29949There is a command injection vulnerability in some Hikvision NVRs.