CVE-2026-57599CWE-269privilege-escalation

CVE-2026-57599

Medium · published July 22, 2026

CVSS v3.1
6.6
EPSS
0%
Percentile
28.2
In the wild
Unconfirmed
What it is

There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the device program, attackers can escalate privileges and gain full control of the device after authenticating via SSH.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00357 · 28.2th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2026-07-22T16:18Z
References (1)
https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/ · [email protected]
EPSS history
Timeline
  • 22 JUL 11:00Z
    There is a privilege escalation vulnerability in some Hikvision cameras
    cvelistv5