suspectedlowVulnerabilityFirst reported Oct 8, 2026

Hikvision: camera flaw CVE-2021-36260 targeted in exploitation attempts in Ukraine

GreyNoise reported a rise in scanning and remote code execution attempts against video surveillance devices in Ukraine between September 21 and October 1, 2026, mostly targeting CVE-2021-36260, a critical command injection flaw in unpatched Hikvision products. The surge coincided with Russian missile and drone strikes, but researchers said no connection has been established.

Members only

The full record: the timeline and 1 linked report

Every update as it happened, with the status at each step
Every report behind the record, newest first
Alerts the moment Hikvision — or anything else you track — is hit again

A free account is all it takes — no card, one minute.

Create a free account Log in