Hikvision Camera Vulnerability Targeted in Remote Code Execution Exploitation Attempts

Scanning and remote code execution attempts targeting video surveillance devices in Ukraine rose between September 21 and October 1, 2026. Most activity focused on CVE-2021-36260, a critical command injection flaw in unpatched Hikvision products. The surge occurred alongside Russian missile and drone strikes, but researchers have not established a connection between the cyber activity and those attacks. The findings highlight renewed interest in an older vulnerability that can let attackers control exposed cameras and recording equipment without signing in. However, GreyNoise’s observations document exploitation attempts, not confirmed takeovers of real surveillance systems. That distinction matters when assessing the...

Read the full article at the source.