CVE-2026-85545 - There is an Vulnerability in some HikCentral Access Control versions

Back Back to CVE browser

HIGH

There is an Vulnerability in some HikCentral Access Control versions

Published Sep 10, 2026

7.1

HIGH

CVSS 3.1

EPSS 0.29%

Description

There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that their role is not authorized to access.

Affected products

Vendor Hikvision Product HikCentral Access Control Default
n/a
- Version
  below V2.5.0(included)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Hikvision

HikCentral Access Control

n/a

Version	Status	Constraints
below V2.5.0(included)	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-75401		Advisory
https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-hikcentral-access-control