SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityDeferred

CVE-2026-57599

There is a privilege escalation vulnerability in some Hikvision cameras.

MEDIUM 6.6EPSS 0.36%

Does this matter?

Lower severity and a low EPSS score (0.36%). Track it; it rarely justifies an emergency change on its own.

Description

There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the device program, attackers can escalate privileges and gain full control of the device after authenticating via SSH.

CVSS 3.1
6.6 MEDIUMCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.36% probability · 29th percentile
CISA KEV
Not listed
Weakness
CWE-269
Source
hsrc@hikvision.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.