Skip to content
English

Products › Brands

Brand

Hikvision: actively exploited vulnerabilities

2 vulnerabilities in Hikvision products (IP cameras and recorders (NVR/DVR)) are in CISA’s catalog of exploited vulnerabilities. Last added: March 5, 2026.

By category

Add just one Hikvision category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • IP cameras and recorders (NVR/DVR) 2 vulnerabilities · Home routers and IoT

Name used by CISA: Hikvision. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Hikvision list.

  1. Rank 1Hikvision IP cameras and recorders (NVR/DVR)

    CVE-2017-7921

    CVE from 2017, added in 2026

    Hikvision Multiple Products Improper Authentication Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Mar 5, 2026
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)
  2. Rank 2Hikvision IP cameras and recorders (NVR/DVR)

    CVE-2021-36260

    Hikvision Improper Input Validation

    Added more than a year ago: ranked by severity.

    Added
    Jan 10, 2022
    CISA deadline
    14 days
    CVSS severity
    9.8 (critical)

Follow and verify

Indicative classification, based on the vendor and product names given by CISA. How products are classified.