Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can execute arbitrary commands on the device by crafting specific messages.
History

Fri, 30 Jan 2026 11:15:00 +0000

Type Values Removed Values Added
Description Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can execute arbitrary commands on the device by crafting specific messages.
References
Metrics cvssV3_1

{'score': 7.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: hikvision

Published:

Updated: 2026-01-30T11:02:26.539Z

Reserved: 2026-01-08T05:37:27.997Z

Link: CVE-2026-22623

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-01-30T11:15:55.663

Modified: 2026-01-30T11:15:55.663

Link: CVE-2026-22623

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.