CVE-2026-22624

Due to inadequate access control, authenticated users of certain HIKSEMI NAS products can manipulate other users' file resources without proper authorization

Medium · published January 30, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
18.0
In the wild
Unconfirmed
What it is

Due to inadequate access control, authenticated users of certain HIKSEMI NAS products can manipulate other users' file resources without proper authorization.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00269 · 18.0th percentile
Published
2026-01-30T11:03Z
EPSS history
Timeline
  • 30 JAN 11:03Z
    Due to inadequate access control, authenticated users of certain HIKSEMI NAS products can manipulate other users' file resources without proper authorization
    cvelistv5