CVE-2026-22626

Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal device behavior by…

Medium · published January 30, 2026

CVSS v3.1
4.9
EPSS
0%
Percentile
35.0
In the wild
Unconfirmed
What it is

Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal device behavior by crafting specific messages.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00418 · 35.0th percentile
Published
2026-01-30T11:03Z
EPSS history
Timeline
  • 30 JAN 11:03Z
    Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal device behavior by…
    cvelistv5