CVE-2026-22623

HIGH

HIKSEMI HS-AFS-S1H1 >=V5.10.10_Build_251126 - Authenticated Command Injection

Title source: llm
STIX 2.1

Description

Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can execute arbitrary commands on the device by crafting specific messages.

References (1)

Core 1

Scores

CVSS v3 7.2
EPSS 0.0047
EPSS Percentile 36.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-77
Status published
Products (1)
HIKSEMI/HS-AFS-S1H1 V5.10.10_Build_251126
Published Jan 30, 2026
Tracked Since Feb 18, 2026