CVE-2026-22626

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-22626", "assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32", "state": "PUBLISHED", "assignerShortName": "hikvision", "dateReserved": "2026-01-08T05:37:27.997Z", "datePublished": "2026-01-30T11:03:29.709Z", "dateUpdated": "2026-02-27T14:37:37.094Z"}, "containers": {"cna": {"descriptions": [{"lang": "en", "value": "Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal device behavior by crafting specific messages."}], "affected": [{"vendor": "HIKSEMI", "product": "HS-AFS-S1H1", "versions": [{"version": "V5.10.10_Build_251126", "status": "affected"}]}], "references": [{"url": "https://www.hiksemitech.com/en/hiksemi/support/security-advisory.html"}], "credits": [{"lang": "en", "value": "Jincheng Wang", "type": "finder"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"}}], "providerMetadata": {"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32", "shortName": "hikvision", "dateUpdated": "2026-01-30T11:03:29.709Z"}, "x_generator": {"engine": "cveClient/1.0.15"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-233", "lang": "en", "description": "CWE-233 Improper Handling of Parameters"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-30T12:40:22.043403Z", "id": "CVE-2026-22626", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-27T14:37:37.094Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-22626", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-30T12:40:22.043403Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-233", "description": "CWE-233 Improper Handling of Parameters"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-30T12:40:39.075Z"}}], "cna": {"credits": [{"lang": "en", "type": "finder", "value": "Jincheng Wang"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "HIKSEMI", "product": "HS-AFS-S1H1", "versions": [{"status": "affected", "version": "V5.10.10_Build_251126"}]}], "references": [{"url": "https://www.hiksemitech.com/en/hiksemi/support/security-advisory.html"}], "x_generator": {"engine": "cveClient/1.0.15"}, "descriptions": [{"lang": "en", "value": "Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal device behavior by crafting specific messages."}], "providerMetadata": {"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32", "shortName": "hikvision", "dateUpdated": "2026-01-30T11:03:29.709Z"}}}, "cveMetadata": {"cveId": "CVE-2026-22626", "state": "PUBLISHED", "dateUpdated": "2026-02-27T14:37:37.094Z", "dateReserved": "2026-01-08T05:37:27.997Z", "assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32", "datePublished": "2026-01-30T11:03:29.709Z", "assignerShortName": "hikvision"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "HS-AFS-S1H1", "vendor": "HIKSEMI", "versions": [{"status": "affected", "version": "V5.10.10_Build_251126"}]}], "source": "hsrc@hikvision.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal device behavior by crafting specific messages."}, {"lang": "es", "value": "Debido a la validaci\u00f3n insuficiente de par\u00e1metros de entrada en la interfaz, los usuarios autenticados de ciertos productos NAS de HIKSEMI pueden causar un comportamiento an\u00f3malo del dispositivo mediante la elaboraci\u00f3n de mensajes espec\u00edficos."}], "id": "CVE-2026-22626", "lastModified": "2026-06-17T10:20:10.977", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 3.6, "source": "hsrc@hikvision.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-22626", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-01-30T12:40:22.043403Z", "version": "2.0.3"}}]}, "published": "2026-01-30T11:15:56.010", "references": [{"source": "hsrc@hikvision.com", "url": "https://www.hiksemitech.com/en/hiksemi/support/security-advisory.html"}], "sourceIdentifier": "hsrc@hikvision.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-233"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T01:10:02.270066+00:00", "value": {"mitigation_remediation": ["Check the HIKSEMI support site for firmware updates that address input validation issues for the HS\u2011AFS\u2011S1H1 model", "Restrict access to the device\u2019s management interface to trusted personnel and enforce least\u2011privilege authentication to limit potential abuse by authenticated users", "Implement network segmentation and monitoring to detect unusual device behavior or restarts that might indicate exploitation attempts"], "summary": {"action": "Assess Impact", "impact": "Device Availability (Potential Denial of Service by abnormal device behavior)"}, "threat_synthesis": {"affected_systems": "The affected product is the HIKSEMI NAS model HS\u2011AFS\u2011S1H1. No specific firmware or hardware revisions are listed, so any recent release may be vulnerable unless a patch has been issued by HIKSEMI.", "description_and_impact": "The vulnerability originates from insufficient validation of input parameters on a management interface. Authenticated users can send specially crafted messages that cause the NAS to behave abnormally, potentially resulting in service interruption or degraded performance. This weakness allows an attacker who has already authenticated to manipulate the device\u2019s operation, consistent with attributes of CWE\u2011233.", "risk_and_exploitability": "With a CVSS score of 4.9 the vulnerability is rated moderately severe, but the EPSS score is below 1% and the issue is not listed in the KEV catalog, indicating a low probability of widespread exploitation. The attack requires valid credentials, so compromise may be limited to insiders or attackers who gain authenticated access. The potential impact is mainly service availability, as abnormal behavior can lead to restarts or loss of functionality."}}}}, "created": "2026-02-02T09:27:54.269548+00:00", "title": "Insufficient Input Validation Leads to Device Abnormal Behavior on HIKSEMI NAS", "updated": "2026-04-18T01:15:05.991424+00:00", "vendors": ["hiksemi", "hiksemi$PRODUCT$hs-afs-s1h1"]}