Hikvision vulnerabilities

CVEs per yearBy the year they were published

1. 20182
2. 20223
3. 20239
4. 20248
5. 202511
6. 202615

Newest CVEs

• CVE-2026-85543

  Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged users to obtain device…

  Hikvision · Wi-Fi series camera

  Medium4.3
• CVE-2026-85545

  There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that their role is not…

  Hikvision · HikCentral Access Control

  High7.1
• CVE-2026-85544

  Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within…

  Hikvision · DS-KV9503

  Medium6.1
• CVE-2026-16843

  Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can…

  Hikvision · DS-3WAP521-SI

  High7.2
• CVE-2026-61392

  There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information from the device’s…

  Hikvision · DS-2CD Series

  Medium5.3
• CVE-2026-61391

  There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction by sending…

  Hikvision · DS-2CD Series

  High7.2
• CVE-2026-61390

  There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending…

  Hikvision · DS-2CD Series

  High7.7
• CVE-2026-57600

  Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data.

  Hikvision · DS-2CD Series

  High7.5
• CVE-2026-57599

  There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the device program, attackers can escalate…

  Hikvision · DS-2CD Series

  Medium6.6
• CVE-2026-32684

  The application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications could obtain…

  Hikvision · Hik-Connect APP

  Low2.9