EIP-2026-119675

This exploit leverages a backdoor in Hikvision IP Camera firmware versions 5.2.0 to 5.3.9 to reset user passwords by sending crafted XML requests to the Security/users endpoint with a hardcoded authentication key. It demonstrates an authentication bypass vulnerability (ICSA-17-124-01).