CVE-2026-61390
HighCVSS 7.7Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets.
Risk Assessment
An attacker can remotely disrupt camera operation, leading to loss of surveillance and potential physical security gaps.
Recommendation
Update the Hikvision camera firmware to the latest version available from the vendor.
Other vulnerabilities in Hikvision cameras
See all- CVE-2026-61392Medium
Some Hikvision cameras have an information disclosure vulnerability that allows unauthenticated attackers to obtain partial information from the device's memory.
- CVE-2026-61391High
Some Hikvision cameras have a stack-based buffer overflow vulnerability that may allow authenticated attackers to cause device malfunction by sending specially crafted packets.
- CVE-2026-57600High
Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data.
- CVE-2026-57599Medium
Some Hikvision cameras have a privilege escalation vulnerability. Due to incorrect permission allocation in the device program, attackers can escalate privileges and gain full control of the device after authenticating via SSH.
Original NVD description (English source)
There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets.