Quick answers
- Is CVE-2026-32684 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-32684 being exploited in the wild.
- How severe is CVE-2026-32684?
- Low severity, with a CVSS score of 2.9, published 12 May 2026.
- Which products and versions are affected?
- Hikvision Hik-Connect Teams Prior to V6.12.0.
- Is there a fix for CVE-2026-32684?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-32684 attacked?
- It is attacked with local access.
- Am I affected by CVE-2026-32684?
- Check whether you run Hikvision Hik-Connect Teams or Hikvision Application at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The vulnerability is classified as an incorrect permission assignment for a critical resource (CWE-732). It occurs because the application's directory access permissions are overly permissive. An attacker with local access to the system could leverage another malicious application to read sensitive data from these directories. The attack complexity is considered high, and while no specific user privileges are required, the attacker must already have the ability to execute code locally on the device. Hikvision has acknowledged the issue, though specific version fixes should be verified through their official support channels.
Affected products
- Hikvision Hikvision Application
Timeline
- 2026-05-12: disclosed: Initial publication of the CVE record.
- 2026-06-02: advisory: CISA-ADP enrichment and CWE assignment.