CVE-2026-85543

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-10 · updated 2026-09-10
Weakness: CWE-285

Description

Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged users to obtain device Wi-Fi configuration information through these interfaces.

Affected products

Hikvision Wi-Fi series camera: https://www.hikvision.com/content/dam/hikvision/en/support/download/firmware/ipc/cve-temp-fw/Network-Camera-V5.7.26-Release-Note-E8.pdf

References

https://www.hikvision.com/content/dam/hikvision/en/support/download/firmware/ipc/cve-temp-fw/Network-Camera-V5.7.26-Release-Note-E8.pdf

Get alerted when CVE-2026-85543 or the next vulnerability affects your stack