{"id":"CVE-2026-1749","aliases":["EUVD-2026-28905","GHSA-r9q2-82fq-2493"],"status":"published","title":"There is an Access Control Vulnerability in some HikCentral Professional versions. This could...","description":"There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00282,"percentile":0.20916,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284"],"published":"2026-05-09T08:27:15Z","modified":"2026-07-25T11:10:00Z","products":[{"vendor":"hikvision","product":"hikcentral professional"}],"references":[{"url":"https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-hikcentral-professional/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1749"},{"url":"https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-hikcentral-professional"},{"url":"https://github.com/advisories/GHSA-r9q2-82fq-2493"}],"sources":{"cve":[{"id":"CVE-2026-1749","description":"There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission.","status":"published","published":"2026-05-09T08:27:15.849Z","modified":"2026-05-11T15:21:55.304Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:20:00.879257Z"}],"euvd":[{"id":"EUVD-2026-28905","description":"There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission.","status":"published","published":"2026-05-09T08:27:15Z","modified":"2026-05-11T15:21:55Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:05:10.736891Z"}],"ghsa":[{"id":"GHSA-r9q2-82fq-2493","title":"There is an Access Control Vulnerability in some HikCentral Professional versions. This could...","description":"There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission.","status":"published","published":"2026-05-09T09:31:44Z","modified":"2026-05-11T18:32:40Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T15:07:59.393178Z"}],"nvd":[{"id":"CVE-2026-1749","description":"There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission.","status":"published","published":"2026-05-09T09:16:08.823Z","modified":"2026-07-25T11:10:00.1Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:12:18.239974Z"}]}}