Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data.
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Tue, 04 Aug 2026 16:15:00 +0000

Type Values Removed Values Added
Title Unauthenticated Data Disclosure via Input Validation Flaw in Hikvision Camera Firmware

Sun, 02 Aug 2026 18:45:00 +0000

Type Values Removed Values Added
Title Unauthenticated Data Disclosure via Input Validation Flaw in Hikvision Camera Firmware

Thu, 30 Jul 2026 10:00:00 +0000

Type Values Removed Values Added
Title Partial Sensitive Data Retrieval via Unauthenticated Input Validation Flaw in Hikvision Cameras

Mon, 27 Jul 2026 23:30:00 +0000

Type Values Removed Values Added
First Time appeared Hikvision
Hikvision ds-2cd Series
Hikvision ds-2de Series
Hikvision ds-2dp Series
Hikvision ds-2td Series
Vendors & Products Hikvision
Hikvision ds-2cd Series
Hikvision ds-2de Series
Hikvision ds-2dp Series
Hikvision ds-2td Series

Sun, 26 Jul 2026 05:30:00 +0000

Type Values Removed Values Added
Title Partial Sensitive Data Retrieval via Unauthenticated Input Validation Flaw in Hikvision Cameras

Wed, 22 Jul 2026 13:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-20
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 22 Jul 2026 11:45:00 +0000

Type Values Removed Values Added
Description Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data.
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: hikvision

Published:

Updated: 2026-07-22T12:35:10.527Z

Reserved: 2026-06-25T02:07:05.126Z

Link: CVE-2026-57600

cve-icon Vulnrichment

Updated: 2026-07-22T12:35:06.309Z

cve-icon NVD

Status : Deferred

Published: 2026-07-22T12:18:16.883

Modified: 2026-07-22T20:50:36.493

Link: CVE-2026-57600

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T16:00:12Z

Weaknesses