Hikvision patches high-severity command injection (CVE-2026-0709) in DS-3WAP access points. Authenticated attackers can execute code. Update now.
Hikvision
High-severity Hikvision stack overflow flaws (CVE-2025-66176) allow attackers to crash cameras & NVRs via LAN. Update firmware now to prevent DoS.
Hikvision has issued an advisory for three flaws in its HikCentral products. The most severe, with a CVSS of 8.6, allows an unauthenticated user to get admin access.
A critical flaw (CVE-2025-34067, CVSS 10.0) in HIKVISION applyCT allows unauthenticated RCE via Fastjson deserialization, risking surveillance systems. Patch immediately!
Canada has ordered Hikvision to shut down nationwide, citing national security concerns. The ban prohibits government use of its products, but Hikvision calls it baseless and biased.
Stay informed about the latest threat to organizations worldwide: the HiatusRAT malware campaign targeting IoT devices.
Keep your Hikvision network cameras secure with firmware updates that protect against a vulnerability that exposes Dynamic DNS credentials.
CVE-2021-36260 is a command injection vulnerability in the web server of some Hikvision products, due to the insufficient input validation