CVE-2026-22626

Published: Jan 30, 2026Modified: Jun 17, 2026Deferred

4.9

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.2 / Impact: 3.6

Source: hsrc@hikvision.com (Secondary)

Description

Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal device behavior by crafting specific messages.

Related CWEs

CWE-233

Improper Handling of Parameters

The product does not properly handle when the expected number of parameters, fields, or arguments is not provided in input, or if those parameters are undefined.

References (1)

https://www.hiksemitech.com/en/hiksemi/support/security-advisory.html

Source: hsrc@hikvision.com

Timeline

No history available yet.