Insufficient Directory Access Restrictions in Hikvision Products

CVE-2026-32684

What is CVE-2026-32684?

The Hikvision firmware exhibits improper access control by failing to impose strict directory access permission restrictions. This vulnerability enables malicious applications to potentially access sensitive information, risking user privacy and system integrity. Users are urged to review their firmware versions and apply necessary updates to mitigate the risks posed by this oversight.

References