Skip to content
COOEY

FAIL › dossier

Hikvision

VENDOR

· dossier confidence 0%

Hikvision is a surveillance vendor with a documented history of high-severity, unpatched vulnerabilities in its products, including remote code execution and command injection flaws that were exploited in the wild.

Failure events
2
Zero-days
0
RCEs
2
On KEV
2
Critical
0
Worst shame
85
PROFILE
CategoryvendorWhat they doHikvision is a vendor that provides security and surveillance products.
SECURITY POSTURE

Hikvision has a poor security posture, evidenced by multiple high-severity remote code execution (RCE) vulnerabilities in its products that remained unpatched and were actively exploited.

Notable failures
  • CVE-2017-7921 unpatched RCE
  • CVE-2021-36260 command injection
Patterns: repeated unpatched edge-device RCEs; insufficient input validation in web servers
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2022-01-10 CVE-2021-36260 high Hikvision security cameras suffered from an unpatched command injection flaw actively exploited in the wild.
2026-03-05 CVE-2017-7921 high Hikvision products had unpatched, exploited improper authentication vulns.
SENTIMENT · TRUSTED SOURCES
synthesissevere-fallout-0.60
Widely condemned for critical RCE flaw in widely deployed devices, compounding existing geopolitical and supply chain concerns.
cooey ↗severe-fallout-0.50
Neutral technical description, no sentiment expressed.
NVD ↗severe-fallout-0.50
Neutral technical description, no sentiment expressed.
CISA ↗severe-fallout-0.50
Neutral technical description, no sentiment expressed.
NVD ↗severe-fallout-0.50
Neutral technical description, no sentiment expressed.
ipvm.com ↗severe-fallout-0.80
Severe condemnation, highlighting critical RCE impact and compounding geopolitical risk.
"Hikvision has admitted a 9.8 vulnerability that is 'the highest level of critical vulnerability—a zero-click unauthenticated remote code execution' per the researcher, Watchful_IP, who discovered this."
securityaffairs.com ↗severe-fallout-0.50
Neutral technical description, no sentiment expressed.
DOSSIER SOURCES
Open questions: What is the current patching cadence for Hikvision firmware updates? · Are there any ongoing active exploits targeting Hikvision CVE-2021-36260?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-11 03:56:13.784608+00:00