CVE-2026-0709

CVSS 3.1: 7.2 high
EPSS: <1%p56
Published: Jan 30, 2026 · Jan 30, 2026
Modified: Jun 17, 2026

Analyze CVE-2026-0709 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution.

Weakness: CWE-78

Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news

1 story

⚡ Weekly Recap: AI Skill Malware, 31Tbps DDoS, Notepad++ Hack, LLM Backdoors and More

The Hacker NewsFeb 9, 12:59 UTC · Feb 9, 2026MalwareCVE-2026-25049 CVE-2026-0709 CVE-2026-23795+233 · 1 read