CVE 7.2 HIGH

CVE-2026-0709_CVE-2026-0709

7.2 / 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution.

Basic Information

ID CVE-2026-0709
Source hikvision
Published Jan 30, 2026 at 11:01

Affected Product

Vendor Hikvision
Product DS-3WAP521-SI
Version V1.1.6303 build250812 and earlier
Affected Versions Hikvision DS-3WAP521-SI V1.1.6303 build250812 and earlier
Hikvision DS-3WAP522-SI V1.1.6303 build250812 and earlier
Hikvision DS-3WAP621E-SI V1.1.6303 build250812 and earlier
Hikvision DS-3WAP622E-SI V1.1.6303 build250812 and earlier
Hikvision DS-3WAP623E-SI V1.1.6303 build250812 and earlier
Hikvision DS-3WAP622G-SI V1.1.6303 build250812 and earlier

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.