CVE-2026-61391
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
Some Hikvision cameras have a stack-based buffer overflow vulnerability that may allow authenticated attackers to cause device malfunction by sending specially crafted packets.
Risk Assessment
An attacker can crash the camera, leading to surveillance downtime and potential loss of video data.
Recommendation
Apply the firmware update provided by Hikvision for affected camera models.
Other vulnerabilities in Hikvision cameras
See all- CVE-2026-61392Medium
Some Hikvision cameras have an information disclosure vulnerability that allows unauthenticated attackers to obtain partial information from the device's memory.
- CVE-2026-61390High
There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets.
- CVE-2026-57600High
Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data.
- CVE-2026-57599Medium
Some Hikvision cameras have a privilege escalation vulnerability. Due to incorrect permission allocation in the device program, attackers can escalate privileges and gain full control of the device after authenticating via SSH.
Original NVD description (English source)
There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction by sending specially crafted packets.