CVE-2026-57599
MediumCVSS 6.6Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
Some Hikvision cameras have a privilege escalation vulnerability. Due to incorrect permission allocation in the device program, attackers can escalate privileges and gain full control of the device after authenticating via SSH.
Risk Assessment
An attacker can gain full control of the camera, potentially leading to espionage, sabotage, or using the device as an entry point into the network.
Recommendation
Contact Hikvision for a patch or update the camera firmware to a version that fixes the permission allocation issue.
Other vulnerabilities in Hikvision cameras
See all- CVE-2026-61392Medium
Some Hikvision cameras have an information disclosure vulnerability that allows unauthenticated attackers to obtain partial information from the device's memory.
- CVE-2026-61391High
Some Hikvision cameras have a stack-based buffer overflow vulnerability that may allow authenticated attackers to cause device malfunction by sending specially crafted packets.
- CVE-2026-61390High
There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets.
- CVE-2026-57600High
Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data.
Original NVD description (English source)
There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the device program, attackers can escalate privileges and gain full control of the device after authenticating via SSH.