Multiple Hikvision Vulnerabilities Let Attackers Cause Device Malfunction Using Crafted Packets

Cybersecuritynews •Guru Baran • January 13, 2026

Hikvision, a leading provider of surveillance and access control systems, faces serious security risks from two newly disclosed stack overflow vulnerabilities. These flaws, tracked as CVE-2025-66176 and CVE-2025-66177, allow attackers on the same local area network (LAN) to trigger device malfunctions by sending specially crafted packets. Both carry a high CVSS v3.1 base score of […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Hikvision Faces Critical Vulnerabilities Allowing Device Disruption Hikvision has disclosed two critical vulnerabilities affecting its security devices, allowing attackers on the same local area network to disrupt device functionality by sending specially crafted packets. These vulnerabilities, identified as CVE-2025-66176 and CVE-2025-66177, have been assigned a high CVSS v3.1 base score, indicating their severity. 3 sources 31

Extracted Entities

Multiple Hikvision Vulnerabilities Let Attackers Cause Device Malfunction Using Crafted Packets

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (2)