Advisories · Technology

HIKSEMI HS-AFS-S1H1.

Every CVE that names HIKSEMI HS-AFS-S1H1 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-22626 CVE record

CVSS 4.9 Medium

Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal device behavior by crafting specific messages.
- HIKSEMI HS-AFS-S1H1
- CWE-233
Not analysed yet 30 Jan 2026
CVE-2026-22625 CVE record

CVSS 4.6 Medium

Path traversal in HIKSEMI HS-AFS-S1H1
- HIKSEMI HS-AFS-S1H1
- Path traversal
Not analysed yet 30 Jan 2026
CVE-2026-22624 CVE record

CVSS 4.3 Medium

Incorrect authorization in HIKSEMI HS-AFS-S1H1
- HIKSEMI HS-AFS-S1H1
- Broken access control
Not analysed yet 30 Jan 2026
CVE-2026-22623 CVE record

CVSS 7.2 High

Command injection in HIKSEMI HS-AFS-S1H1
- HIKSEMI HS-AFS-S1H1
- Command injection
Not analysed yet 30 Jan 2026