Unquoted Service Path Vulnerability in Hikvision HikCentral FocSign

CVE-2025-39246

What is CVE-2025-39246?

An unquoted service path vulnerability exists in certain versions of HikCentral FocSign offered by Hikvision. This vulnerability permits an authenticated user to potentially escalate privileges through local access, which could lead to unauthorized actions within the system. It is crucial for users to apply security measures and updates to mitigate this risk.

References