Hikvision Camera Vulnerability Targeted in Remote Code Execution Exploitation Attempts

Cybersecuritynews •Guru Baran • October 8, 2026

Scanning and remote code execution attempts targeting video surveillance devices in Ukraine rose between September 21 and October 1, 2026. Most activity focused on CVE-2021-36260, a critical command injection flaw in unpatched Hikvision products. The surge occurred alongside Russian missile and drone strikes, but researchers have not established a connection between the cyber activity and […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Hikvision Camera Vulnerability Exploited Amid Ukraine Conflict Hackers have targeted Hikvision surveillance devices in Ukraine, exploiting a critical command injection vulnerability (CVE-2021-36260) during a surge of Russian missile and drone strikes. GreyNoise reported a nine-day increase in exploitation attempts from September 23 to October 1, 2026, with activity traced to four IP addresses, three of which are linked to PureVPN. Although the attacks coincided with military actions, researchers could not confirm any successful compromises of the cameras. The vulnerability allows unauthenticated attackers to execute commands remotely on unpatched devices. The attackers utilized a publicly available Nuclei template to facilitate their scanning and exploitation efforts. Despite the increase in activity, no evidence was found to directly link the cyber exploitation to the ongoing military strikes. The situation raises concerns about potential surveillance capabilities if the devices are compromised. 5 sources 63

Extracted Entities

Hikvision Camera Vulnerability Targeted in Remote Code Execution Exploitation Attempts

The full story

Extracted Entities

Attack Types (1)

Countries (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)