Back

Improper Input Validation in Hikvision Cameras

Publication date: August 17th, 2026

CVE ID:

CVE-2026-57600

CVSS scrore:

7.5 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected vendors:

Hangzhou Hikvision Digital Technology Co., Ltd.

Affected products:

DS-2CD1021-I - V5.7.23 build 241211; DS2D2141G1-IDW1 - V5.5.88 build 200610; Other models might be affected

Vulnerability details:

Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data.

Additional details:

A manual update fixes the issue

Credit:

Bitdefender IoT Security Team

Linked KB article:

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/