CVE-2026-57599 | There is a privilege escalation vulnerability in some Hikvis… | CVSS 6.6 MEDIUM

Description

There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the device program, attackers can escalate privileges and gain full control of the device after authenticating via SSH.

Metadata

CVE ID: CVE-2026-57599
State: PUBLISHED
Assigner: hikvision
Reserved: 2026-06-25 02:07 UTC
Published: 2026-07-22 11:00 UTC
Last updated: 2026-07-22 12:44 UTC
Primary CWE: CWE-269
CWE-269 Improper Privilege Management
Vendor / Product: Hikvision / DS-2CD Series
Sources: cve.org · NVD

Severity & Metrics

6.6 MEDIUM CVSS 3.1

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: none
Automatable: no
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
Hikvision	DS-2CD Series	—	https://www.hikvision.com/en/support/download/firmware/security-firmware-download/

Weakness (CWE)

CWE	Source	Description
CWE-269	adp	CWE-269 Improper Privilege Management

CVSS scores (1)

Score	Severity	Version	Source	Vector
6.6	MEDIUM	3.1	cna	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

References (1)

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/