CVE-2026-1749

MediumCVSS 6.8

Published: 09/05/2026(UTC)Updated: 25/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

20th percentile - higher than 20% of all known CVEs

Summary

An access control vulnerability in some HikCentral Professional versions could allow an unauthenticated user to obtain admin permission.

Risk Assessment

An unauthenticated attacker can gain full control over the HikCentral Professional system, potentially compromising data confidentiality and integrity.

Recommendation

Update HikCentral Professional to the latest version that fixes this access control vulnerability.

Original NVD description (English source)

There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission.