CVE-2026-22626

{"id": "CVE-2026-22626", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "hsrc@hikvision.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.2}]}, "published": "2026-01-30T11:15:56.010", "references": [{"url": "https://www.hiksemitech.com/en/hiksemi/support/security-advisory.html", "source": "hsrc@hikvision.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-233"}]}], "descriptions": [{"lang": "en", "value": "Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal device behavior by crafting specific messages."}, {"lang": "es", "value": "Debido a la validaci\u00f3n insuficiente de par\u00e1metros de entrada en la interfaz, los usuarios autenticados de ciertos productos NAS de HIKSEMI pueden causar un comportamiento an\u00f3malo del dispositivo mediante la elaboraci\u00f3n de mensajes espec\u00edficos."}], "lastModified": "2026-04-15T00:35:42.020", "sourceIdentifier": "hsrc@hikvision.com"}