VYPR
Critical severity9.8CISA KEVNVD Advisory· Published Sep 22, 2021· Updated Jun 17, 2026

CVE-2021-36260

CVE-2021-36260

Description

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

258

Patches

Vulnerability mechanics

References

6

News mentions

2