{"schema_version":1,"title":"Hikvision vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 15 vulnerabilities in Hikvision: 0 in the last 7 days and 8 in the last 90 days, 2 of them critical and 2 exploited in the wild. The most recent, CVE-2026-85545, was published on 10 September 2026. 2 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/hikvision","json_url":"https://junglewise.ai/threats/vendors/hikvision.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/hikvision","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":8,"all_time":15,"critical":2,"exploited":2,"last_7_days":0,"last_30_days":2,"last_90_days":8,"last_365_days":14},"latest":[{"cve":"CVE-2026-85545","cvss":7.1,"epss":0.0029,"slug":"cve-2026-85545-hikvision-hikcentral-access-control-privilege-escalation","title":"Hikvision HikCentral Access Control privilege escalation","severity":"high","exploited":false,"published_at":"2026-09-10T13:20:32.543+00:00","url":"https://junglewise.ai/threats/cve-2026-85545-hikvision-hikcentral-access-control-privilege-escalation"},{"cve":"CVE-2026-85544","cvss":6.1,"epss":0.0041,"slug":"cve-2026-85544-hikvision-intercom-main-card-forgery-via-immutable-factory-value","title":"Hikvision Intercom main card forgery via immutable factory value","severity":"medium","exploited":false,"published_at":"2026-09-10T13:20:32.433+00:00","url":"https://junglewise.ai/threats/cve-2026-85544-hikvision-intercom-main-card-forgery-via-immutable-factory-value"},{"cve":"CVE-2026-16843","cvss":7.2,"slug":"cve-2026-16843-hikvision-wireless-access-points-authenticated-command-execution","title":"Hikvision Wireless Access Points authenticated command execution","severity":"high","exploited":false,"published_at":"2026-07-31T11:17:05.567+00:00","url":"https://junglewise.ai/threats/cve-2026-16843-hikvision-wireless-access-points-authenticated-command-execution"},{"cve":"CVE-2026-61392","cvss":5.3,"slug":"cve-2026-61392-hikvision-ds-2cd-and-ds-2de-series-information-disclosure","title":"Hikvision DS-2CD and DS-2DE Series information disclosure","severity":"medium","exploited":false,"published_at":"2026-07-22T12:18:18.35+00:00","url":"https://junglewise.ai/threats/cve-2026-61392-hikvision-ds-2cd-and-ds-2de-series-information-disclosure"},{"cve":"CVE-2026-61391","cvss":7.2,"slug":"cve-2026-61391-hikvision-ds-2cd-and-ds-2de-series-stack-based-buffer-overflow","title":"Hikvision DS-2CD and DS-2DE Series stack-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-07-22T12:18:18.247+00:00","url":"https://junglewise.ai/threats/cve-2026-61391-hikvision-ds-2cd-and-ds-2de-series-stack-based-buffer-overflow"},{"cve":"CVE-2026-61390","cvss":7.7,"slug":"cve-2026-61390-hikvision-cameras-heap-buffer-overflow-in-ds-2cd-and-ds-2de","title":"Hikvision Cameras heap buffer overflow in DS-2CD and DS-2DE series","severity":"high","exploited":false,"published_at":"2026-07-22T12:18:18.137+00:00","url":"https://junglewise.ai/threats/cve-2026-61390-hikvision-cameras-heap-buffer-overflow-in-ds-2cd-and-ds-2de"},{"cve":"CVE-2026-57600","cvss":7.5,"slug":"cve-2026-57600-hikvision-camera-series-improper-input-validation-in-firmware","title":"Hikvision Camera Series improper input validation in firmware","severity":"high","exploited":false,"published_at":"2026-07-22T12:18:16.883+00:00","url":"https://junglewise.ai/threats/cve-2026-57600-hikvision-camera-series-improper-input-validation-in-firmware"},{"cve":"CVE-2026-57599","cvss":6.6,"slug":"cve-2026-57599-hikvision-ds-2cd-series-privilege-escalation-in-ssh-interface","title":"Hikvision DS-2CD Series privilege escalation in SSH interface","severity":"medium","exploited":false,"published_at":"2026-07-22T12:18:16.757+00:00","url":"https://junglewise.ai/threats/cve-2026-57599-hikvision-ds-2cd-series-privilege-escalation-in-ssh-interface"},{"cve":"CVE-2026-32684","cvss":2.9,"epss":0.0004,"slug":"cve-2026-32684-hikvision-application-incorrect-directory-permissions","title":"Hikvision Application incorrect directory permissions","severity":"low","exploited":false,"published_at":"2026-05-12T11:16:19.283+00:00","url":"https://junglewise.ai/threats/cve-2026-32684-hikvision-application-incorrect-directory-permissions"},{"cve":"CVE-2026-3828","cvss":7.2,"epss":0.0084,"slug":"cve-2026-3828-hikvision-switches-remote-command-execution-due-to-insufficient","title":"Hikvision Switches remote command execution due to insufficient input validation","severity":"high","exploited":false,"published_at":"2026-05-09T09:16:09.107+00:00","url":"https://junglewise.ai/threats/cve-2026-3828-hikvision-switches-remote-command-execution-due-to-insufficient"},{"cve":"CVE-2026-1749","cvss":6.8,"epss":0.0028,"slug":"cve-2026-1749-hikvision-hikcentral-professional-access-control-bypass","title":"Hikvision HikCentral Professional access control bypass","severity":"medium","exploited":false,"published_at":"2026-05-09T09:16:08.823+00:00","url":"https://junglewise.ai/threats/cve-2026-1749-hikvision-hikcentral-professional-access-control-bypass"},{"cve":"CVE-2017-7921","cvss":9.8,"epss":0.9423,"slug":"cve-2017-7921-hikvision-ip-cameras-improper-authentication","title":"Hikvision IP Cameras improper authentication","severity":"critical","exploited":true,"published_at":"2026-03-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-7921-hikvision-ip-cameras-improper-authentication"},{"cve":"CVE-2025-66177","cvss":8.8,"epss":0.0032,"slug":"cve-2025-66177-hikvision-nvr-dvr-ipc-buffer-overflow-in-search-and-discovery","title":"Hikvision NVR/DVR/IPC buffer overflow in Search and Discovery feature","severity":"high","exploited":false,"published_at":"2026-01-13T03:16:01.25+00:00","url":"https://junglewise.ai/threats/cve-2025-66177-hikvision-nvr-dvr-ipc-buffer-overflow-in-search-and-discovery"},{"cve":"CVE-2025-66176","cvss":8.8,"epss":0.0049,"slug":"cve-2025-66176-hikvision-access-control-products-stack-overflow-in-sadp-xml","title":"Hikvision Access Control Products stack overflow in SADP XML parsing","severity":"high","exploited":false,"published_at":"2026-01-13T03:16:01.097+00:00","url":"https://junglewise.ai/threats/cve-2025-66176-hikvision-access-control-products-stack-overflow-in-sadp-xml"},{"cve":"CVE-2021-36260","cvss":9.8,"slug":"cve-2021-36260-hikvision-improper-input-validation","title":"Hikvision Improper Input Validation","severity":"critical","exploited":true,"published_at":"2022-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-36260-hikvision-improper-input-validation"}],"vendor":{"hub":true,"name":"Hikvision","slug":"hikvision","homepage":"https://www.hikvision.com/en/","description":"A manufacturer of video surveillance equipment and technology solutions.","url":"https://junglewise.ai/threats/vendors/hikvision"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2017-7921","cvss":9.8,"epss":0.9423,"slug":"cve-2017-7921-hikvision-ip-cameras-improper-authentication","title":"Hikvision IP Cameras improper authentication","severity":"critical","exploited":true,"published_at":"2026-03-05T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-7921-hikvision-ip-cameras-improper-authentication"},{"cve":"CVE-2021-36260","cvss":9.8,"slug":"cve-2021-36260-hikvision-improper-input-validation","title":"Hikvision Improper Input Validation","severity":"critical","exploited":true,"published_at":"2022-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-36260-hikvision-improper-input-validation"},{"cve":"CVE-2025-66176","cvss":8.8,"epss":0.0049,"slug":"cve-2025-66176-hikvision-access-control-products-stack-overflow-in-sadp-xml","title":"Hikvision Access Control Products stack overflow in SADP XML parsing","severity":"high","exploited":false,"published_at":"2026-01-13T03:16:01.097+00:00","url":"https://junglewise.ai/threats/cve-2025-66176-hikvision-access-control-products-stack-overflow-in-sadp-xml"},{"cve":"CVE-2025-66177","cvss":8.8,"epss":0.0032,"slug":"cve-2025-66177-hikvision-nvr-dvr-ipc-buffer-overflow-in-search-and-discovery","title":"Hikvision NVR/DVR/IPC buffer overflow in Search and Discovery feature","severity":"high","exploited":false,"published_at":"2026-01-13T03:16:01.25+00:00","url":"https://junglewise.ai/threats/cve-2025-66177-hikvision-nvr-dvr-ipc-buffer-overflow-in-search-and-discovery"},{"cve":"CVE-2026-61390","cvss":7.7,"slug":"cve-2026-61390-hikvision-cameras-heap-buffer-overflow-in-ds-2cd-and-ds-2de","title":"Hikvision Cameras heap buffer overflow in DS-2CD and DS-2DE series","severity":"high","exploited":false,"published_at":"2026-07-22T12:18:18.137+00:00","url":"https://junglewise.ai/threats/cve-2026-61390-hikvision-cameras-heap-buffer-overflow-in-ds-2cd-and-ds-2de"},{"cve":"CVE-2026-57600","cvss":7.5,"slug":"cve-2026-57600-hikvision-camera-series-improper-input-validation-in-firmware","title":"Hikvision Camera Series improper input validation in firmware","severity":"high","exploited":false,"published_at":"2026-07-22T12:18:16.883+00:00","url":"https://junglewise.ai/threats/cve-2026-57600-hikvision-camera-series-improper-input-validation-in-firmware"},{"cve":"CVE-2026-3828","cvss":7.2,"epss":0.0084,"slug":"cve-2026-3828-hikvision-switches-remote-command-execution-due-to-insufficient","title":"Hikvision Switches remote command execution due to insufficient input validation","severity":"high","exploited":false,"published_at":"2026-05-09T09:16:09.107+00:00","url":"https://junglewise.ai/threats/cve-2026-3828-hikvision-switches-remote-command-execution-due-to-insufficient"},{"cve":"CVE-2026-16843","cvss":7.2,"slug":"cve-2026-16843-hikvision-wireless-access-points-authenticated-command-execution","title":"Hikvision Wireless Access Points authenticated command execution","severity":"high","exploited":false,"published_at":"2026-07-31T11:17:05.567+00:00","url":"https://junglewise.ai/threats/cve-2026-16843-hikvision-wireless-access-points-authenticated-command-execution"},{"cve":"CVE-2026-61391","cvss":7.2,"slug":"cve-2026-61391-hikvision-ds-2cd-and-ds-2de-series-stack-based-buffer-overflow","title":"Hikvision DS-2CD and DS-2DE Series stack-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-07-22T12:18:18.247+00:00","url":"https://junglewise.ai/threats/cve-2026-61391-hikvision-ds-2cd-and-ds-2de-series-stack-based-buffer-overflow"},{"cve":"CVE-2026-85545","cvss":7.1,"epss":0.0029,"slug":"cve-2026-85545-hikvision-hikcentral-access-control-privilege-escalation","title":"Hikvision HikCentral Access Control privilege escalation","severity":"high","exploited":false,"published_at":"2026-09-10T13:20:32.543+00:00","url":"https://junglewise.ai/threats/cve-2026-85545-hikvision-hikcentral-access-control-privilege-escalation"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Hikvision DS-2CD Series","slug":"ds-2cd-series","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/ds-2cd-series"},{"name":"Hikvision DS-2DE Series","slug":"ds-2de-series","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/ds-2de-series"}]}