Hikvision vulnerabilities
We track 29 vulnerabilities in Hikvision products across 60+ products. 29 are rated high or critical, and 2 have been exploited in real attacks. The most recent was published on September 10, 2026.
Latest Hikvision vulnerabilities
- 7.1 High severity
HikCentral Access Control: Improper Access Control
There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that their role is not authorized to access.
- 7.2 High severity
DS-3WAP521-SI: Improper Neutralization of Special Elements used in an OS Command
Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, lead
- 7.2 High severity
DS-2CD Series: Stack-based Buffer Overflow
There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction by sending specially crafted packets.
- 7.7 High severity
DS-2CD Series: Heap-based Buffer Overflow
There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets.
- 7.5 High severity
Insufficient validation of input parameters in the firmware of some Hikvision cameras allows…
Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data.
- 7.2 High severity
DS-3E1310P-SI: Improper Neutralization of Special Elements used in an OS Command
Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malici
- 7.2 High severity
DS-3WAP521-SI: Improper Neutralization of Special Elements used in an OS Command
Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, l
- 8.8 High severity
DS-96xxxNI-Hx: Stack-based Buffer Overflow
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets t
- 8.8 High severity
DS-K1T331: Stack-based Buffer Overflow
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets
- 8.3 High severity
CSMP iSecure Center: Improper Neutralization of Special Elements used in an OS Command
Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2024-08-01 allows execution of a command within $( ) in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025.
- 8.3 High severity
CSMP iSecure Center: Path Traversal: '../filedir'
Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2023-06-25 allows file upload via /center/api/files directory traversal, as exploited in the wild in 2024 and 2025.
- 9.8 Critical severity
iSecure Center: Improper Neutralization of Parameter/Argument Delimiters
Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may exploit this to gain platform privileges and execute arbitrary commands on the system.iSecure Center is
- 9.8 Critical severity
iSecure Center: Unrestricted Upload of File with Dangerous Type
Some versions of Hikvision's iSecure Center Product have an improper file upload control vulnerability. Due to the improper verification of file to be uploaded, attackers may upload malicious files to the server. iSecure Center is software released for China's
- 8.6 High severity
HikCentral Professional: Improper Access Control
There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission.
- 10.0 Critical severity
Integrated Security Management Platform: Deserialization of Untrusted Data
An unauthenticated remote command execution vulnerability exists in the applyCT component of the Hikvision Integrated Security Management Platform due to the use of a vulnerable version of the Fastjson library. The endpoint /bic/ssoService/v1/applyCT deseriali
- 7.2 High severity
DS-3WAP622G-SI: Improper Neutralization of Special Elements used in an OS Command
Some Hikvision Wireless Access Point are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devi
- 8.8 High severity
HikCentral Professional: Improper Neutralization of Special Elements used in an SQL Command
There is a SQL injection vulnerability in some HikCentral Professional versions. This could allow an authenticated user to execute arbitrary SQL queries.
- 9.8 Critical severity
HikCentral Master Lite: Improper Neutralization of Formula Elements in a CSV File
There is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could build malicious data to generate executable commands in the CSV file.
- 7.2 High severity
DS-7604NI-K1 / 4P(B): Improper Neutralization of Special Elements used in a Command
There is a command injection vulnerability in some Hikvision NVRs. This could allow an authenticated user with administrative rights to execute arbitrary commands.
- 7.5 High severity
HikCentral Professional: Improper Authorization
Due to insufficient server-side validation, a successful exploit of this vulnerability could allow an attacker to gain access to certain URLs that the attacker should not have access to.
- 9.8 Critical severity
Intercom Broadcasting System: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK). It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondata[ip] with the input n
- 7.5 High severity
Intercom Broadcasting System: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK) and classified as problematic. Affected by this issue is some unknown functionality of the file /php/exportrecord.php. The manipulation of the argument downname wit
- 9.8 Critical severity
LocalServiceComponents: Buffer Copy without Checking Size of Input
There is a buffer overflow vulnerability in a web browser plug-in could allow an attacker to exploit the vulnerability by sending crafted messages to computers installed with this plug-in, which could lead to arbitrary code execution or cause process exception
- 7.5 High severity
DS-K1T804AXX: Session Fixation
Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid u
- 9.8 Critical severity
DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A7202…: Improper Access Control
Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices.
- 9.8 Critical severity
DS-3WF0AC-2NT: Improper Access Control
The web server of some Hikvision wireless bridge products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices.
- 9.8 Critical severity
DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A7202…: Improper Neutralization of Special Elements used in a Command
The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to execute restricted commands by sending messages with malicious c
- 9.8 Critical severity
Hikvision Improper Input Validation Exploited
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.
- 9.8 Critical severity
Hikvision Multiple Products Improper Authentication Exploited
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2