{"id":158,"date":"2026-10-11T17:35:56","date_gmt":"2026-10-11T06:35:56","guid":{"rendered":"https:\/\/mallen.com.au\/blog\/?p=158"},"modified":"2026-10-11T17:35:56","modified_gmt":"2026-10-11T06:35:56","slug":"hikvision-security-vulnerabilities-september-2026-what-to-update","status":"publish","type":"post","link":"https:\/\/mallen.com.au\/blog\/hikvision-security-vulnerabilities-september-2026-what-to-update\/","title":{"rendered":"Hikvision Security Vulnerabilities, September 2026: What to Update"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Hikvision disclosed three separate security vulnerabilities on 10 September 2026: one in IP intercom door stations, one in HikCentral Access Control software, and one in Wi-Fi network cameras. Fixed firmware and software are already available for all three, and Hikvision has stated it is not aware of any active exploitation or public exploit code. None of this is an emergency, but each item represents exactly the kind of published, patchable vulnerability that insurers and procurement teams ask about months after the fact \u2014 so it&#8217;s worth working through methodically rather than ignoring it.<\/p>\n\n<h2 class=\"wp-block-heading\">What was disclosed, and in what order to tackle it<\/h2>\n\n<p class=\"wp-block-paragraph\">The three vulnerabilities are unrelated and each needs its own fix applied separately:<\/p>\n\n<ul class=\"wp-block-list\"><li><strong>CVE-2026-85545 \u2014 HikCentral Access Control (CVSS 7.1):<\/strong> affects version 2.5.0 and below. A signed-in user with a low-privilege role can reach functions their role was never meant to expose. Fixed in version 2.5.1.<\/li><li><strong>CVE-2026-85544 \u2014 IP intercom door stations (CVSS 5.2):<\/strong> affects 13 named door station models. A weakness in card encryption handling allows an attacker physically at the panel to forge an M1 (Mifare Classic) entry card. Fixed firmware is available per model.<\/li><li><strong>CVE-2026-85543 \u2014 Wi-Fi network cameras (CVSS 4.3):<\/strong> a signed-in low-privilege user can read the camera&#8217;s Wi-Fi configuration through an interface that should not expose it. Fixed in firmware V5.7.26.<\/li><\/ul>\n\n<p class=\"wp-block-paragraph\">The severity score alone doesn&#8217;t tell you the right order to work through these. CVE-2026-85545 is the only one reachable remotely over the network by someone who never needs to set foot on site \u2014 that makes it the priority, regardless of the other two having lower-but-still-relevant scores. The intercom and camera vulnerabilities both require an attacker to already be physically present at the device, or already have a valid login \u2014 meaningfully different risk profiles to a remotely exploitable access control flaw.<\/p>\n\n<h2 class=\"wp-block-heading\">Operational implications for Australian sites<\/h2>\n\n<p class=\"wp-block-paragraph\">For HikCentral Access Control, the real exposure isn&#8217;t the vulnerability itself \u2014 it&#8217;s how many accounts with low-privilege roles are still active on a given install. Reception staff, former contractors, HR users set up years ago and never removed. A permissions escalation flaw is far less useful to an attacker against a system with a clean, current user list. Any patching cycle for this advisory is a good trigger to audit active accounts and roles at the same time.<\/p>\n\n<p class=\"wp-block-paragraph\">For the intercom door stations, there&#8217;s a worthwhile detail buried in Hikvision&#8217;s advisory: door stations with the M1 Card Encryption feature already enabled are not affected by CVE-2026-85544 at all. That&#8217;s worth checking before scheduling any site visits \u2014 if a site was commissioned with encryption switched on, the urgency drops considerably. If it wasn&#8217;t, that&#8217;s a second, longer-standing issue worth addressing regardless of this specific CVE, since unencrypted M1\/Mifare Classic cards have been cloneable for years independent of this vulnerability. Either way, loading the patched firmware at the next scheduled service visit is sound practice \u2014 a configuration setting can be changed by someone else later; patched firmware stays patched.<\/p>\n\n<p class=\"wp-block-paragraph\">For the Wi-Fi camera vulnerability, the affected firmware release note names a long list of camera models, but only those with a Wi-Fi radio are actually exposed to this particular flaw \u2014 wired-only cameras have no Wi-Fi configuration to leak. It&#8217;s still sensible to roll the firmware update across the fleet at the next visit regardless, since the same release also addresses unrelated reliability issues with cameras dropping offline.<\/p>\n\n<h2 class=\"wp-block-heading\">Mallen&#8217;s take<\/h2>\n\n<p class=\"wp-block-paragraph\">None of these three require an emergency callout. Two of them need an attacker who already has physical access or a valid login \u2014 that&#8217;s a materially different risk to something exploitable cold, from off-site. But &#8220;no active exploitation&#8221; doesn&#8217;t mean &#8220;ignore it.&#8221; A disclosed CVE with a published fix sitting unpatched is the sort of thing that surfaces in an insurance questionnaire or a tender compliance check long after the actual security risk has become academic.<\/p>\n\n<p class=\"wp-block-paragraph\">For sites running HikCentral Access Control or any of the named Hikvision intercom or Wi-Fi camera models, we&#8217;d recommend prioritising the HikCentral update first, checking M1 encryption settings on intercom door stations before committing to site visits, and rolling camera firmware updates into the next scheduled maintenance window. This is also a good moment to review who actually holds active accounts on your access control platform \u2014 a stale user list is a bigger practical risk than most CVEs. If your site doesn&#8217;t have a current device and firmware register, <a href=\"https:\/\/mallen.com.au\/services.html#audit\">the Mallen site audit<\/a> is a straightforward way to establish one before the next advisory lands.<\/p>\n\n<p class=\"wp-block-paragraph\">For sites with Hikvision access control or intercom hardware, our <a href=\"https:\/\/mallen.com.au\/services.html#access-control\">access control and visitor management<\/a> team can confirm which models and firmware versions are in scope and schedule the updates as part of routine maintenance.<\/p>\n\n<p class=\"wp-block-paragraph\">Original source: https:\/\/www.ertech.co.uk\/hikvision-security-vulnerabilities-september-2026\/<\/p>","protected":false},"excerpt":{"rendered":"<p>Hikvision disclosed three separate security vulnerabilities on 10 September 2026: one in IP intercom door stations, one in HikCentral Access Control software, and one in Wi-Fi network cameras. Fixed firmware and software are already available for all three, and Hikvision&hellip;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[17,9,10,8,16],"class_list":["post-158","post","type-post","status-publish","format-standard","hentry","category-security-bulletin","tag-access-control","tag-cve","tag-firmware","tag-hikvision","tag-ip-cameras"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Hikvision Security Vulnerabilities, September 2026: What to Update - Mallen Services Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/mallen.com.au\/blog\/hikvision-security-vulnerabilities-september-2026-what-to-update\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Hikvision Security Vulnerabilities, September 2026: What to Update - Mallen Services Blog\" \/>\n<meta property=\"og:description\" content=\"Hikvision disclosed three separate security vulnerabilities on 10 September 2026: one in IP intercom door stations, one in HikCentral Access Control software, and one in Wi-Fi network cameras. Fixed firmware and software are already available for all three, and Hikvision&hellip;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/mallen.com.au\/blog\/hikvision-security-vulnerabilities-september-2026-what-to-update\/\" \/>\n<meta property=\"og:site_name\" content=\"Mallen Services Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-11T06:35:56+00:00\" \/>\n<meta name=\"author\" content=\"Mallen Newsroom\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Mallen Newsroom\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/hikvision-security-vulnerabilities-september-2026-what-to-update\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/hikvision-security-vulnerabilities-september-2026-what-to-update\\\/\"},\"author\":{\"name\":\"Mallen Newsroom\",\"@id\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/#\\\/schema\\\/person\\\/4d777684cddb8303a581c08d2309f223\"},\"headline\":\"Hikvision Security Vulnerabilities, September 2026: What to Update\",\"datePublished\":\"2026-10-11T06:35:56+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/hikvision-security-vulnerabilities-september-2026-what-to-update\\\/\"},\"wordCount\":803,\"publisher\":{\"@id\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/#organization\"},\"keywords\":[\"access-control\",\"cve\",\"firmware\",\"hikvision\",\"ip-cameras\"],\"articleSection\":[\"Security Bulletin\"],\"inLanguage\":\"en-AU\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/hikvision-security-vulnerabilities-september-2026-what-to-update\\\/\",\"url\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/hikvision-security-vulnerabilities-september-2026-what-to-update\\\/\",\"name\":\"Hikvision Security Vulnerabilities, September 2026: What to Update - Mallen Services Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/#website\"},\"datePublished\":\"2026-10-11T06:35:56+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/hikvision-security-vulnerabilities-september-2026-what-to-update\\\/#breadcrumb\"},\"inLanguage\":\"en-AU\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/mallen.com.au\\\/blog\\\/hikvision-security-vulnerabilities-september-2026-what-to-update\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/hikvision-security-vulnerabilities-september-2026-what-to-update\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Hikvision Security Vulnerabilities, September 2026: What to Update\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/\",\"name\":\"Mallen Services Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-AU\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/#organization\",\"name\":\"Mallen Services Blog\",\"url\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-AU\",\"@id\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/mallen_logo.png\",\"contentUrl\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/mallen_logo.png\",\"width\":300,\"height\":99,\"caption\":\"Mallen Services Blog\"},\"image\":{\"@id\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/20317354\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/#\\\/schema\\\/person\\\/4d777684cddb8303a581c08d2309f223\",\"name\":\"Mallen Newsroom\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-AU\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/897ec101e702c9c928945a9febd0c8386517fd1f7722ad5b7460e46e49be291f?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/897ec101e702c9c928945a9febd0c8386517fd1f7722ad5b7460e46e49be291f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/897ec101e702c9c928945a9febd0c8386517fd1f7722ad5b7460e46e49be291f?s=96&d=mm&r=g\",\"caption\":\"Mallen Newsroom\"},\"url\":\"https:\\\/\\\/mallen.com.au\\\/blog\\\/author\\\/mallen-newsroom\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Hikvision Security Vulnerabilities, September 2026: What to Update - Mallen Services Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/mallen.com.au\/blog\/hikvision-security-vulnerabilities-september-2026-what-to-update\/","og_locale":"en_US","og_type":"article","og_title":"Hikvision Security Vulnerabilities, September 2026: What to Update - Mallen Services Blog","og_description":"Hikvision disclosed three separate security vulnerabilities on 10 September 2026: one in IP intercom door stations, one in HikCentral Access Control software, and one in Wi-Fi network cameras. Fixed firmware and software are already available for all three, and Hikvision&hellip;","og_url":"https:\/\/mallen.com.au\/blog\/hikvision-security-vulnerabilities-september-2026-what-to-update\/","og_site_name":"Mallen Services Blog","article_published_time":"2026-10-11T06:35:56+00:00","author":"Mallen Newsroom","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Mallen Newsroom","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/mallen.com.au\/blog\/hikvision-security-vulnerabilities-september-2026-what-to-update\/#article","isPartOf":{"@id":"https:\/\/mallen.com.au\/blog\/hikvision-security-vulnerabilities-september-2026-what-to-update\/"},"author":{"name":"Mallen Newsroom","@id":"https:\/\/mallen.com.au\/blog\/#\/schema\/person\/4d777684cddb8303a581c08d2309f223"},"headline":"Hikvision Security Vulnerabilities, September 2026: What to Update","datePublished":"2026-10-11T06:35:56+00:00","mainEntityOfPage":{"@id":"https:\/\/mallen.com.au\/blog\/hikvision-security-vulnerabilities-september-2026-what-to-update\/"},"wordCount":803,"publisher":{"@id":"https:\/\/mallen.com.au\/blog\/#organization"},"keywords":["access-control","cve","firmware","hikvision","ip-cameras"],"articleSection":["Security Bulletin"],"inLanguage":"en-AU"},{"@type":"WebPage","@id":"https:\/\/mallen.com.au\/blog\/hikvision-security-vulnerabilities-september-2026-what-to-update\/","url":"https:\/\/mallen.com.au\/blog\/hikvision-security-vulnerabilities-september-2026-what-to-update\/","name":"Hikvision Security Vulnerabilities, September 2026: What to Update - Mallen Services Blog","isPartOf":{"@id":"https:\/\/mallen.com.au\/blog\/#website"},"datePublished":"2026-10-11T06:35:56+00:00","breadcrumb":{"@id":"https:\/\/mallen.com.au\/blog\/hikvision-security-vulnerabilities-september-2026-what-to-update\/#breadcrumb"},"inLanguage":"en-AU","potentialAction":[{"@type":"ReadAction","target":["https:\/\/mallen.com.au\/blog\/hikvision-security-vulnerabilities-september-2026-what-to-update\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/mallen.com.au\/blog\/hikvision-security-vulnerabilities-september-2026-what-to-update\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/mallen.com.au\/blog\/"},{"@type":"ListItem","position":2,"name":"Hikvision Security Vulnerabilities, September 2026: What to Update"}]},{"@type":"WebSite","@id":"https:\/\/mallen.com.au\/blog\/#website","url":"https:\/\/mallen.com.au\/blog\/","name":"Mallen Services Blog","description":"","publisher":{"@id":"https:\/\/mallen.com.au\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/mallen.com.au\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-AU"},{"@type":"Organization","@id":"https:\/\/mallen.com.au\/blog\/#organization","name":"Mallen Services Blog","url":"https:\/\/mallen.com.au\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-AU","@id":"https:\/\/mallen.com.au\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/mallen.com.au\/blog\/wp-content\/uploads\/2026\/04\/mallen_logo.png","contentUrl":"https:\/\/mallen.com.au\/blog\/wp-content\/uploads\/2026\/04\/mallen_logo.png","width":300,"height":99,"caption":"Mallen Services Blog"},"image":{"@id":"https:\/\/mallen.com.au\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/20317354"]},{"@type":"Person","@id":"https:\/\/mallen.com.au\/blog\/#\/schema\/person\/4d777684cddb8303a581c08d2309f223","name":"Mallen Newsroom","image":{"@type":"ImageObject","inLanguage":"en-AU","@id":"https:\/\/secure.gravatar.com\/avatar\/897ec101e702c9c928945a9febd0c8386517fd1f7722ad5b7460e46e49be291f?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/897ec101e702c9c928945a9febd0c8386517fd1f7722ad5b7460e46e49be291f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/897ec101e702c9c928945a9febd0c8386517fd1f7722ad5b7460e46e49be291f?s=96&d=mm&r=g","caption":"Mallen Newsroom"},"url":"https:\/\/mallen.com.au\/blog\/author\/mallen-newsroom\/"}]}},"_links":{"self":[{"href":"https:\/\/mallen.com.au\/blog\/wp-json\/wp\/v2\/posts\/158","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mallen.com.au\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mallen.com.au\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mallen.com.au\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/mallen.com.au\/blog\/wp-json\/wp\/v2\/comments?post=158"}],"version-history":[{"count":1,"href":"https:\/\/mallen.com.au\/blog\/wp-json\/wp\/v2\/posts\/158\/revisions"}],"predecessor-version":[{"id":160,"href":"https:\/\/mallen.com.au\/blog\/wp-json\/wp\/v2\/posts\/158\/revisions\/160"}],"wp:attachment":[{"href":"https:\/\/mallen.com.au\/blog\/wp-json\/wp\/v2\/media?parent=158"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mallen.com.au\/blog\/wp-json\/wp\/v2\/categories?post=158"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mallen.com.au\/blog\/wp-json\/wp\/v2\/tags?post=158"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}