CVE-2026-57600
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data.
Risk Assessment
An unauthenticated attacker can retrieve partial sensitive data from the camera, potentially compromising privacy and security of the monitored environment.
Recommendation
Update Hikvision camera firmware to the latest version that includes the input validation fix.
Other vulnerabilities in Hikvision cameras
See all- CVE-2026-61392Medium
Some Hikvision cameras have an information disclosure vulnerability that allows unauthenticated attackers to obtain partial information from the device's memory.
- CVE-2026-61391High
Some Hikvision cameras have a stack-based buffer overflow vulnerability that may allow authenticated attackers to cause device malfunction by sending specially crafted packets.
- CVE-2026-61390High
There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets.
- CVE-2026-57599Medium
Some Hikvision cameras have a privilege escalation vulnerability. Due to incorrect permission allocation in the device program, attackers can escalate privileges and gain full control of the device after authenticating via SSH.
Original NVD description (English source)
Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data.