InfoSecBulletin Cybersecurity for mankind
Hikvision has released an important firmware update for its wireless access points (APs) to fix a serious vulnerability that could let attackers take control of the devices. Known as CVE-2026-0709, this flaw has a CVSS score of 7.2, indicating a high risk for businesses using these devices for connectivity.
The vulnerability arises from poor input validation in software development. This allows an attacker with valid credentials to gain higher access by sending specially crafted packets to execute harmful code.
Citrix NetScaler SAML 0-Day Flaw Under Attack
Major Danish university breached, 200,000 users at risk
Microsoft’s X account hijacked to promote Clippy crypto scam
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
Although the attacker must be authenticated, experts warn that this vulnerability is still serious. It could serve as the next step in an attack, where a low-level account is compromised, allowing the attacker to exploit this flaw to take complete control of the operating system.
The advisory warns that the issue causes “arbitrary command execution.” If someone executes code on a network device like an access point, they could intercept traffic, access other devices, or disrupt wireless services.
The security flaw affects many Hikvision “DS-3WAP” access points. The vulnerable models include those with firmware version V1.1.6303 build250812 and earlier:
DS-3WAP521-SI
DS-3WAP522-SI
DS-3WAP621E-SI
DS-3WAP622E-SI
DS-3WAP623E-SI
Hikvision has issued a fix for all affected models. Network admins should update devices to Version V1.1.6601 build251223 right away to prevent attacks.
