Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2017-7921 — Hikvision Multiple Products Improper Authentication Vulnerability
Multiple Hikvision products contain an improper authentication vulnerability that could allow a malicious user to escalate privileges on the system and gain access to sensitive information.
|
Hikvision | Multiple Products | Mar 5, 2026 | Mar 26, 2026 | |
|
CVE-2021-36260 — Hikvision Improper Input Validation
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation.
|
Hikvision | Security cameras web server | Jan 10, 2022 | Jan 24, 2022 |
Multiple Hikvision products contain an improper authentication vulnerability that could allow a malicious user to escalate privileges on the system and gain access to sensitive information.
Multiple Products · Mar 5, 2026
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation.
Security cameras web server · Jan 10, 2022