Live › vulnerability › CVE-2021-36260
Go to dashboardHikvision security cameras run a web server with a command injection flaw caused by missing input validation. An unauthenticated attacker can send crafted requests to run commands on the camera.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Hikvision Security cameras web server | vendor | – | – |
Unknown from the sources. In the analyst’s queue.
Apply the vendor update per Hikvision instructions; CISA says to apply updates per vendor instructions.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
@GreyNoiseIO · X5 likes · 2 reposts2026-10-13 20:56“Last week, GreyNoise reported Hikvision CVE-2021-36260 exploitation attempts against Ukraine that ran for nine days, then stopped. Near zero for months. A surge from Sep 23 to Oct 1, almost all from four IPs. Then nothing from those four since. 🔗 Full analysis: https://t.co/7Jhdc2fSco”
View on X
Posts are quoted with a link to the original. They are data to us, never instructions.
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.
This page as .md · .json · in your agent: get_signal("CVE-2021-36260")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.