Is CVE-2026-57599 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-57599 being exploited in the wild.

How severe is CVE-2026-57599?

Medium severity, with a CVSS score of 6.6, published 22 July 2026.

Which products and versions are affected?

Hikvision DS-2CD Series Camera Multiple versions (refer to vendor advisory).

Is there a fix for CVE-2026-57599?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-57599 attacked?

It is attacked over the network, in device firmware.

Am I affected by CVE-2026-57599?

Check whether you run Hikvision DS-2CD Series Camera at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-57599: Hikvision DS-2CD Series privilege escalation in SSH interface

CVE-2026-57599 · Severity: medium · CVSS 6.6 · Published 2026-07-22

A security flaw exists in certain Hikvision DS-2CD series cameras, which are widely used for professional video surveillance. An attacker who already has limited access to the camera's command-line interface can exploit this flaw to gain full administrative control. This could allow an unauthorized party to disable security monitoring, access private video feeds, or use the device as a foothold to attack other parts of the corporate network.

Vendors: Hikvision.

Quick answers

Is CVE-2026-57599 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-57599 being exploited in the wild.
How severe is CVE-2026-57599?: Medium severity, with a CVSS score of 6.6, published 22 July 2026.
Which products and versions are affected?: Hikvision DS-2CD Series Camera Multiple versions (refer to vendor advisory).
Is there a fix for CVE-2026-57599?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-57599 attacked?: It is attacked over the network, in device firmware.
Am I affected by CVE-2026-57599?: Check whether you run Hikvision DS-2CD Series Camera at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A privilege escalation vulnerability exists in the firmware of Hikvision DS-2CD series cameras due to incorrect permission allocation within the device program. The flaw is reachable via the SSH interface; an attacker must first possess valid credentials to authenticate to the device. Once authenticated, the attacker can exploit the improper access controls to elevate their privileges to a higher level, potentially gaining root or full administrative access. This allows for complete compromise of the device's integrity, confidentiality, and availability. Hikvision has released a security advisory directing users to updated firmware versions to mitigate this risk.

Affected products

Hikvision DS-2CD Series Cameras Multiple versions (refer to vendor advisory)

Timeline

2026-07-22: advisory: Initial disclosure by Hikvision and NVD publication

References

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.