CVE-2026-16843

HIGH7.2

Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validation

Published Jul 31, 2026

Modified 1 weeks ago

Details

Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution.

References

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-16843

WEB

https://www.hikvision.com/en/support/cybersecurity/security-advisory/command-execution-vulnerability-in-some-wireless-ap-products/

CVSS Analysis

CVSS v3.1

7.2

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

HighPR:H

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Ecosystems

Timeline

PublishedJul 31, 2026

ModifiedAug 3, 2026