Skip to content
OpenAdvisories
High · 7.2 CVE-2026-22623 EUVD-2026-5035GHSA-6qp4-m27m-3pjj

Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can execute arbitrary …

Published Jan 30, 2026 · Updated Feb 27, 2026 · Assigned by hikvision

Description

Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can execute arbitrary commands on the device by crafting specific messages.

Affected products

VendorProductAffectedFixed
HIKSEMI HS-AFS-S1H1 V5.10.10_Build_251126 —

References