CVE-2026-85545

HIGH 7.1

CVSS Score

7.1

EPSS Score

0.0%

EPSS Percentile

0th

There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that their role is not authorized to access.

Vendor	hikvision
Product	hikcentral access control
Published	Sep 10, 2026
Last Updated	Sep 10, 2026

Stay Ahead of the Next One

Get instant alerts for hikvision hikcentral access control

Be the first to know when new high vulnerabilities affecting hikvision hikcentral access control are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

None

Affected Versions

Hikvision / HikCentral Access Control

below V2.5.0(included)

References

NVD ↗ CVE.org ↗ EPSS Data ↗

hikvision.com: https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-hikcentral-access-control

Credits

Patrick Tung (@patrickt2017)