Privilege escalation in Hikvision Ds-2cd Series

CVE-2026-57599

There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the device program, attackers can escalate privileges and gain full control of the device after authenticating via SSH.

Vulnerability class: Privilege Escalation

CVSS v3 metric

CVSS v3 base score 6.6 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

  • Hikvision Ds-2cd Series — versions https://www.hikvision.com/en/support/download/firmware/security-firmware-download/

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-57599?
CVE-2026-57599 is a medium-severity vulnerability in Hikvision Ds-2cd Series, classified under Improper Privilege Management. CVSS score: 6.6/10. Published 2026-07-22.
How severe is CVE-2026-57599?
Medium severity. CVSS v3 base score is 6.6 out of 10.