7.7High

CVE-2026-61390

Hikvision DS-2CD Series; Hikvision DS-2DE Series Published: (3 months ago)

Description

There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets.

Weakness (CWE): CWE-122

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Hikvision DS-2CD Series https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
Hikvision DS-2DE Series https://www.hikvision.com/en/support/download/firmware/security-firmware-download/

References and patches