Vulnerability intelligence

CVE-2021-36260

Hikvision Improper Input Validation

Hikvision Security cameras web server

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation.

CVSS Score

—

Unrated

EPSS — Exploit Probability

100%

Riskier than 100% of all CVEs · checked 2026-09-04

Exploitation

Confirmed in the wild

KEV since 2022-01-10

Remediation

Unconfirmed

Federal deadline 2022-01-24

CISA required action

Apply updates per vendor instructions. Deadline for federal agencies: 2022-01-24.

3 articles across 3 outlets · first covered Mar 4, 2026 · latest Mar 7, 2026

Coverage timeline