CVE Feed

    Dashboard / CVE / CVE-2026-85544

    CVE-2026-85544

    Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attackers to forge a legitimate main card, thereby gaining the permission to issue cards.

    Published:Sep 10, 2026
    Last Modified:Sep 21, 2026
    EPS:Sep 10, 2026
    EPSS Score:0.00148
    CVSS Score:6.1

    Affected Products

    Vendor
    Hikvision
    Product
    Ds-kd8003
    Vendor
    Hikvision
    Product
    Ds-kd8005
    Vendor
    Hikvision
    Product
    Ds-kv6103
    Vendor
    Hikvision
    Product
    Ds-kv6113
    Vendor
    Hikvision
    Product
    Ds-kv6114
    Vendor
    Hikvision
    Product
    Ds-kv6124
    Vendor
    Hikvision
    Product
    Ds-kv6133
    Vendor
    Hikvision
    Product
    Ds-kv6134
    Vendor
    Hikvision
    Product
    Ds-kv8113
    Vendor
    Hikvision
    Product
    Ds-kv8114
    Vendor
    Hikvision
    Product
    Ds-kv8213
    Vendor
    Hikvision
    Product
    Ds-kv8413
    Vendor
    Hikvision
    Product
    Ds-kv9503

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High