Skip to content

CyberSIXT Search

Vendor

Hikvision

CVEs tracked · all time: 5
in CISA KEV · all time: 2
articles · since 11 Sep: 0
articles · all time: 10

No articles in the last 45 daysThe latest: Security Affairs, Sat 7 Mar, 10:55 UTC.See the full timeline

Products: Multiple Products, Security cameras web server

CVEs

5 CVEs

CVE-2021-36260Hikvision Improper Input ValidationCVSSUnratedExploited99.8%EPSS3articles

CVE-2017-7921Hikvision Multiple Products Improper Authentication VulnerabilityCVSSUnratedExploited99.9%EPSS9articles

CVE-2023-6895Hikvision Intercom Broadcasting System ping.php os command injectionCVSSUnrated–Not in KEV89%EPSS3articles

CVE-2025-34067Hikvision Integrated Security Management Platform Remote Command Execution via applyCT FastjsonCVSSUnrated–Not in KEV22%EPSS3articles

CVE-2026-0709Hikvision DS-3WAP521-SI vulnerabilityCVSSUnrated–Not in KEV0.9%EPSS1article

Coverage

10 articles, all timeFull timeline RSS feed

7 MarIran-linked actors scan Hikvision and Dahua cams via VPN for CVEsSecurity Affairs
6 MarIran weaponises cameras with CVEs to plan missile strikesDark Reading
6 MarKEV adds CVE-2017-7921 and CVE-2021-22681 patch due by 26 MarSOCRadar
6 MarCISA Adds CVEs to KEV for Apple Rockwell and Hikvision FlawsSecurity Affairs
6 MarCISA flags CVE-2017-7921 CVE-2021-22681 amid Hikvision exploitsThe Hacker News
5 MarKEV Adds Hikvision CVE-2017-7921 Privilege Escalation RiskCISA · official notice
5 MarHikvision CVE-2017-7921 Improper authentication enables accessCISA · official notice
4 MarIran-linked Hackers Target Hikvision Cameras via CVE-2021-33044Infosecurity
4 MarIranian actors exploit Hikvision and Dahua IP cameras via CVEsCheck Point
3 FebWiFi Hijack: Hikvision Patches Command Injection in DS-3WAP Access PointsSecurityOnline · first in our coverage