HIKSEMI vulnerabilities
Published CVEs affecting HIKSEMI products: 4 record(s), with severity, exploitation and fixes.
CVE-2026-22626
Medium · 4.9
CWE-233 Jan 30, 2026
Due to insufficient input parameter validation on the interface, authenticated users of…
Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal device behavior by crafting specific messages.
CVE-2026-22625
Medium · 4.6
CWE-22 Jan 30, 2026
Path Traversal in HIKSEMI HS-AFS-S1H1
Improper handling of filenames in certain HIKSEMI NAS products may lead to the exposure of sensitive system files.
CVE-2026-22624
Medium · 4.3
CWE-863 Jan 30, 2026
Incorrect Authorization in HIKSEMI HS-AFS-S1H1
Due to inadequate access control, authenticated users of certain HIKSEMI NAS products can manipulate other users' file resources without proper authorization.
CVE-2026-22623
High · 7.2
CWE-77 Jan 30, 2026
Command Injection in HIKSEMI HS-AFS-S1H1
Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can execute arbitrary commands on the device by crafting specific messages.