{"id":"CVE-2026-85545","aliases":["EUVD-2026-75401","GHSA-4mg3-wwjr-979v"],"status":"published","title":"There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege...","description":"There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that their role is not authorized to access.","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.0029,"percentile":0.21688,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284"],"published":"2026-09-10T12:27:07Z","modified":"2026-09-10T15:33:27Z","products":[{"vendor":"hikvision","product":"hikcentral access control"}],"references":[{"url":"https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-hikcentral-access-control"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85545"},{"url":"https://github.com/advisories/GHSA-4mg3-wwjr-979v"}],"sources":{"cve":[{"id":"CVE-2026-85545","description":"There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that their role is not authorized to access.","status":"published","published":"2026-09-10T12:27:07.037Z","modified":"2026-09-10T14:46:23.183Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:19:52.016971Z"}],"euvd":[{"id":"EUVD-2026-75401","description":"There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that their role is not authorized to access.","status":"published","published":"2026-09-10T12:27:07Z","modified":"2026-09-10T14:46:23Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"high"}],"updated_at":"2026-11-02T17:28:24.835649Z"}],"ghsa":[{"id":"GHSA-4mg3-wwjr-979v","title":"There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege...","description":"There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that their role is not authorized to access.","status":"published","published":"2026-09-10T15:33:13Z","modified":"2026-09-10T15:33:27Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"high"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T15:11:41.43854Z"}],"nvd":[{"id":"CVE-2026-85545","description":"There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that their role is not authorized to access.","status":"published","published":"2026-09-10T13:20:32.543Z","modified":"2026-09-10T15:17:49.693Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:12:45.93749Z"}]}}