- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/01/2026, Hikvision recorded 9 security vulnerabilities in the last 90 days across 29 products, including 5 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, DS-2CD Series had the most security vulnerabilities in the Hikvision ecosystem, with 5 vulnerabilities—approximately 55.56% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-85543 | Exploitation statusPublic exploit | FixNot confirmed | Affected productWi-Fi series camera | Published09/10/2026 | SeverityMedium |
CVE-2026-85545 | Exploitation statusNot known exploited | FixNot confirmed | Affected productHikCentral Access Control | Published09/10/2026 | SeverityHigh |
CVE-2026-85544 | Exploitation statusNot known exploited | FixNot confirmed | Affected productDS-KV9503 | Published09/10/2026 | SeverityMedium |
CVE-2026-16843 | Exploitation statusNot known exploited | FixNot confirmed | Affected productDS-3WAP521-SI | Published07/31/2026 | SeverityHigh |
CVE-2026-61392 | Exploitation statusNot known exploited | FixNot confirmed | Affected productDS-2CD Series | Published07/22/2026 | SeverityMedium |
CVE-2026-61391 | Exploitation statusNot known exploited | FixNot confirmed | Affected productDS-2CD Series | Published07/22/2026 | SeverityHigh |
CVE-2026-61390 | Exploitation statusNot known exploited | FixNot confirmed | Affected productDS-2CD Series | Published07/22/2026 | SeverityHigh |
CVE-2026-57600 | Exploitation statusNot known exploited | FixNot confirmed | Affected productDS-2CD Series | Published07/22/2026 | SeverityHigh |
CVE-2026-57599 | Exploitation statusNot known exploited | FixNot confirmed | Affected productDS-2CD Series | Published07/22/2026 | SeverityMedium |
CVE-2026-32684 | Exploitation statusNot known exploited | FixNot confirmed | Affected productHik-Connect APP | Published05/12/2026 | SeverityLow |
CVE-2026-3828 | Exploitation statusNot known exploited | FixNot confirmed | Affected productDS-3E1310P-SI | Published05/09/2026 | SeverityHigh |
CVE-2026-1749 | Exploitation statusNot known exploited | FixNot confirmed | Affected productHikCentral Professional | Published05/09/2026 | SeverityMedium |
CVE-2026-0709 | Exploitation statusNot known exploited | FixNot confirmed | Affected productDS-3WAP521-SI | Published01/30/2026 | SeverityHigh |
CVE-2025-66177 | Exploitation statusNot known exploited | FixNot confirmed | Affected productDS-96xxxNI-Hx | Published01/13/2026 | SeverityHigh |
CVE-2025-66176 | Exploitation statusNot known exploited | FixNot confirmed | Affected productDS-K1T331 | Published01/13/2026 | SeverityHigh |
CVE-2025-66174 | Exploitation statusNot known exploited | FixNot confirmed | Affected productDS-7104HGHI-F1 | Published12/19/2025 | SeverityMedium |
CVE-2025-66173 | Exploitation statusNot known exploited | FixNot confirmed | Affected productDS-7104HGHI-F1 | Published12/19/2025 | SeverityMedium |
CVE-2023-53691 | Exploitation statusPublic exploit | FixNot confirmed | Affected productCSMP iSecure Center | Published10/22/2025 | SeverityHigh |
CVE-2024-58274 | Exploitation statusPublic exploit | FixNot confirmed | Affected productCSMP iSecure Center | Published10/22/2025 | SeverityHigh |
CVE-2023-28815 | Exploitation statusNot known exploited | FixNot confirmed | Affected productiSecure Center | Published10/17/2025 | SeverityCritical |
CVE-2023-28814 | Exploitation statusNot known exploited | FixNot confirmed | Affected productiSecure Center | Published10/17/2025 | SeverityCritical |
CVE-2025-39247 | Exploitation statusNot known exploited | FixNot confirmed | Affected productHikCentral Professional | Published08/29/2025 | SeverityHigh |
CVE-2025-39246 | Exploitation statusNot known exploited | FixNot confirmed | Affected productHikCentral FocSign | Published08/29/2025 | SeverityMedium |
CVE-2025-39245 | Exploitation statusNot known exploited | FixNot confirmed | Affected productHikCentral Master Lite | Published08/29/2025 | SeverityMedium |
CVE-2025-34067Hikvision Integrated Security Management Platform Remote Command Execution via applyCT Fastjson | Exploitation statusPublic exploit | FixNot confirmed | Affected productIntegrated Security Management Platform | Published07/02/2025 | SeverityCritical |
CVE-2025-39240 | Exploitation statusNot known exploited | FixNot confirmed | Affected productDS-3WAP622G-SI | Published06/13/2025 | SeverityHigh |
CVE-2024-47486 | Exploitation statusNot known exploited | FixNot confirmed | Affected productHikCentral Master Lite | Published10/18/2024 | SeverityLow |
CVE-2024-47487 | Exploitation statusNot known exploited | FixNot confirmed | Affected productHikCentral Professional | Published10/18/2024 | SeverityHigh |
CVE-2024-47485 | Exploitation statusNot known exploited | FixNot confirmed | Affected productHikCentral Master Lite | Published10/18/2024 | SeverityMedium |
CVE-2023-33806 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published04/15/2024 | SeverityHigh |
CVE-2024-29949 | Exploitation statusNot known exploited | FixNot confirmed | Affected productDS-7604NI-K1 / 4P(B) | Published04/02/2024 | SeverityHigh |
CVE-2024-29948 | Exploitation statusNot known exploited | FixNot confirmed | Affected productDS-7604NXI-K1/4P | Published04/02/2024 | SeverityLow |
CVE-2024-29947 | Exploitation statusNot known exploited | FixNot confirmed | Affected productDS-7604NI-K1 / 4P(B) | Published04/02/2024 | SeverityLow |
CVE-2024-25064 | Exploitation statusNot known exploited | FixNot confirmed | Affected productHikCentral Professional | Published03/02/2024 | SeverityMedium |
CVE-2024-25063 | Exploitation statusNot known exploited | FixNot confirmed | Affected productHikCentral Professional | Published03/02/2024 | SeverityHigh |
CVE-2023-6895Hikvision Intercom Broadcasting System ping.php os command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productIntercom Broadcasting System | Published12/17/2023 | SeverityMedium |
CVE-2023-6894Hikvision Intercom Broadcasting System Log File system.html information disclosure | Exploitation statusPublic exploit | FixNot confirmed | Affected productIntercom Broadcasting System | Published12/17/2023 | SeverityMedium |
CVE-2023-6893Hikvision Intercom Broadcasting System exportrecord.php path traversal | Exploitation statusPublic exploit | FixNot confirmed | Affected productIntercom Broadcasting System | Published12/17/2023 | SeverityMedium |
CVE-2023-28813 | Exploitation statusNot confirmed | FixNot confirmed | Affected productLocalServiceComponents | Published11/23/2023 | SeverityHigh |
CVE-2023-28812 | Exploitation statusNot known exploited | FixNot confirmed | Affected productLocalServiceComponents | Published11/23/2023 | SeverityCritical |
CVE-2023-28811 | Exploitation statusNot confirmed | FixNot confirmed | Affected productiDS-EXXHUH | Published11/23/2023 | SeverityHigh |
CVE-2023-28809 | Exploitation statusNot known exploited | FixYes | Affected productDS-K1T804AXX | Published06/15/2023 | SeverityHigh |
CVE-2023-28810 | Exploitation statusNot known exploited | FixYes | Affected productDS-K1T804AXX | Published06/15/2023 | SeverityMedium |
CVE-2023-28808 | Exploitation statusNot known exploited | FixYes | Affected productDS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D | Published04/11/2023 | SeverityCritical |
CVE-2022-28173 | Exploitation statusNot known exploited | FixYes | Affected productDS-3WF0AC-2NT | Published12/21/2022 | SeverityCritical |
CVE-2022-28172 | Exploitation statusNot confirmed | FixYes | Affected productDS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D | Published06/27/2022 | SeverityMedium |
CVE-2022-28171 | Exploitation statusNot confirmed | FixYes | Affected productDS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D | Published06/27/2022 | SeverityHigh |
CVE-2018-6414 | Exploitation statusNot confirmed | FixNot confirmed | Affected productDS-2DE4xxxW,DS-2DE5xxxW,DS-2DE7xxxW | Published08/13/2018 | SeverityUnknown |
CVE-2018-6413 | Exploitation statusNot confirmed | FixNot confirmed | Affected productDS-2CD9111-S | Published04/18/2018 | SeverityUnknown |
CVE-2017-13774 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/30/2017 | SeverityUnknown |
CVE-2013-4977 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/03/2014 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
.svg){kind=icon}
