CVE-2026-22624

—

CVSS 3.1

4.3 medium

EPSS

<1%p16

Published

Jan 30, 2026 (Jan 30, 2026)

Modified

Jun 17, 2026

Description

Due to inadequate access control, authenticated users of certain HIKSEMI NAS products can manipulate other users' file resources without proper authorization.

Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.