CVE-2026-0709 HIGH

CVE-2026-0709

Vendor Hikvision
Product DS-3WAP521-SI
Published January 30, 2026
Last update February 27, 2026

CVSS base score

7.2/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution.

Key dates

02Disclosure timeline

January 30, 2026 CVE published
February 27, 2026 Record updated