Exploitation Summary
EIP tracks 2 public exploits for CVE-2026-0709. PoCs published by XiaomingX, SnipersMaster.
AI-analyzed exploit summary The repository provides a Python script template for CVE-2026-0709, an authenticated RCE vulnerability in Hikvision Wireless APs, but lacks the actual endpoint, parameter, and authentication logic required for exploitation. It serves as a placeholder requiring manual customization.
Description
Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution.
Exploits (2)
The repository provides a Python script template for CVE-2026-0709, an authenticated RCE vulnerability in Hikvision Wireless APs, but lacks the actual endpoint, parameter, and authentication logic required for exploitation. It serves as a placeholder requiring manual customization.
The repository provides a Python script template for CVE-2026-0709, an authenticated RCE vulnerability in Hikvision Wireless APs, but lacks the actual exploit details (e.g., endpoint paths, parameter names). It requires manual customization based on vendor advisories or other PoCs.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H