Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-22624

Inadequate Access Control Enables Authenticated Users to Modify Files on HIKSEMI NAS

Due to inadequate access control, authenticated users of certain HIKSEMI NAS products can manipulate other users' file resources without proper authorization.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Hiksemi
Products
Hs-afs-s1h1
CVE-2026-22623

Authenticated Command Injection Vulnerability in HIKSEMI NAS Interface

Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can execute arbitrary commands on the device by crafting specific messages.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Hiksemi
Products
Hs-afs-s1h1
CVE-2026-22625

Exposing Sensitive System Files via Improper Filename Handling

Improper handling of filenames in certain HIKSEMI NAS products may lead to the exposure of sensitive system files.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Hiksemi
Products
Hs-afs-s1h1
CVE-2026-22626

Insufficient Input Validation Leads to Device Abnormal Behavior on HIKSEMI NAS

Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal device behavior by crafting specific messages.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Hiksemi
Products
Hs-afs-s1h1