Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2026-3828

Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with vali

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hikvision

Description

Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hikvision DS-3E1310P-SI

  • Versions below V1.2.4_210623 (including V1.2.4_210623)affected

Hikvision DS-3E1318P-SI

  • Versions below V1.2.0_210823 (including V1.2.0_210823)affected

Hikvision DS-3E1326P-SI

  • Versions below V1.2.0_210823 (including V1.2.0_210823)affected

References