What is the CVSS score of CVE-2026-0709?

CVE-2026-0709 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Hikvision are affected by CVE-2026-0709?

Hikvision Wireless Access Points are susceptible to remote command execution by authenticated users, potentially allowing attackers with valid credentials to compromise network infrastructure.

How to fix or mitigate CVE-2026-0709?

Within 24 hours: Inventory all Hikvision Wireless Access Points in your environment and identify which models are affected; restrict administrative access to these devices to essential personnel only. Within 7 days: Implement network segmentation to isolate affected access points on a dedicated management VLAN with strict access controls; enforce multi-factor authentication for all administrative accounts. Within 30 days: Monitor vendor advisories for patch availability; evaluate replacement of affected devices with alternative vendors if patches remain unavailable; conduct security assessment of any access points that may have been compromised.

Hikvision CVE-2026-0709

HIGH

OS Command Injection (CWE-78)

2026-01-30 hsrc@hikvision.com

Hikvision

7.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:00 vuln.today

CVE Published

Jan 30, 2026 - 11:15 nvd

HIGH 7.2

DescriptionCVE.org

Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution.

AnalysisAI

Authenticated command injection in Hikvision Wireless Access Points allows credential-holding attackers to execute arbitrary commands through insufficient input validation on network packets. The vulnerability affects all users of vulnerable Hikvision WAP models with valid account access and currently lacks available patches. With a CVSS score of 7.2, this poses a significant risk for environments where administrative credentials may be compromised or shared.

Technical ContextAI

Classified as CWE-78 (OS Command Injection). Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution.

Affected ProductsAI

Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid cre

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

More in Hikvision

View all

CVE-2017-7921 CRITICAL Act Now POC

9.8 May 06

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16

CVE-2014-4880 HIGH Act Now POC

7.5 Dec 08

Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote atta

CVE-2013-4977 CRITICAL Emergency POC

10.0 Mar 03

Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), a

CVE-2021-36260 CRITICAL Emergency POC

9.8 Sep 22

A command injection vulnerability in the web server of some Hikvision product. Rated critical severity (CVSS 9.8), this

CVE-2023-6895 CRITICAL Act Now POC

9.8 Dec 17

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK). Rated critical severity

CVE-2022-28171 CRITICAL Act Now POC

9.8 Jun 27

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Rated cr

CVE-2023-6893 HIGH This Week POC

7.5 Dec 17

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK) and classified as proble

CVE-2025-34067 CRITICAL Act Now

10.0 Jul 02

An unauthenticated remote command execution vulnerability exists in the applyCT component of the Hikvision Integrated Se

CVE-2023-6894 MEDIUM This Month POC

6.5 Dec 17

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK). Rated medium severity (

CVE-2023-28808 CRITICAL Act Now

9.8 Apr 11

Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the

CVE-2022-28173 CRITICAL Act Now

9.8 Dec 19

The web server of some Hikvision wireless bridge products have an access control vulnerability which can be used to obta

CVE-2018-6414 CRITICAL Act Now

9.8 Aug 13

A buffer overflow vulnerability in the web server of some Hikvision IP Cameras allows an attacker to send a specially cr

Same weakness CWE-78 – OS Command Injection

View all

CVE-2014-6271 CRITICAL POC

9.8

CVE-2014-6278 HIGH POC

8.8

CVE-2017-6334 HIGH POC

8.8

CVE-2024-50603 CRITICAL POC

10.0

CVE-2025-64328 HIGH POC

8.6

CVE-2014-7169 CRITICAL POC

9.8

CVE-2017-6884 HIGH POC

8.8

CVE-2017-6077 CRITICAL POC

9.8

CVE-2026-0709 vulnerability details – vuln.today

Back

Hikvision CVE-2026-0709

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

Affected ProductsAI

RemediationAI

More in Hikvision

Same weakness CWE-78 – OS Command Injection

Share

External POC / Exploit Code