CVE-2026-57600

Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data

High · published July 22, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
35.4
In the wild
Unconfirmed
What it is

Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00421 · 35.4th percentile
Published
2026-07-22T11:01Z
EPSS history
Timeline
  • 22 JUL 11:01Z
    Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data
    cvelistv5