CVE-2026-16843

highCVSS 7.2covered by 1 sourcefirst seen 2026-07-31

Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution.

⚡ Watch CVE-2026-16843

Get an email if CVE-2026-16843 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.89% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 56% of all EPSS-scored CVEs.

Advisory coverage (1)

highCVE-2026-16843: Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to…nvd · 2026-07-31

External references

NVD record for CVE-2026-16843

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-16843 status](https://www.csirts.com/badge/CVE-2026-16843)](https://www.csirts.com/cve/CVE-2026-16843)