Privilege Escalation Vulnerability in Hikvision Cameras
CVE-2026-57599

6.6MEDIUM

Key Information:

Vendor

Hikvision

Status
Ds-2cd Series
Vendor
CVE Published:
22 July 2026

What is CVE-2026-57599?

A significant vulnerability exists in select Hikvision camera models that allows an attacker to escalate privileges and gain unauthorized access. This flaw arises from improper permission assignments within the device software, enabling an authenticated user to elevate their permissions via SSH and potentially control the device entirely. Users should apply the latest firmware updates and security patches to mitigate this risk.

Affected Version(s)

DS-2CD Series https://www.hikvision.com/en/support/download/firmware/security-firmware-download/

References

https://www.hikvision.com/en/support/cybersecurity/securi...

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Joffrey Czarny
.