CVE-2026-3828 HIGH

CVE-2026-3828

Vendor Hikvision
Product DS-3E1310P-SI
Published May 9, 2026
Last update May 11, 2026

CVSS base score

7.2/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution.

Key dates

02Disclosure timeline

May 9, 2026 CVE published
May 11, 2026 Record updated