CVE-2026-3828 affects Hikvision DS-3E1310P-SI network switches, allowing authenticated users to execute arbitrary commands remotely by exploiting insufficient input validation in the device's firmware versions up to V1.2.4_210623. The vulnerability is classified under CWE-78 (Improper Neutralization of Special Elements used in an OS Command). It requires valid credentials and network access to the device. The CVSS v3.1 base score is 7.2, indicating high severity with network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. The product is discontinued, and no vendor patch or official remediation has been announced.

Successful exploitation allows an attacker with valid credentials to execute arbitrary commands on the affected device remotely, potentially leading to full compromise of the switch, disruption of network operations, and unauthorized access to network traffic. The vulnerability impacts confidentiality, integrity, and availability of the device and connected network segments. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the product is discontinued and no official fix has been announced, organizations should consider compensating controls such as restricting administrative access to trusted networks, enforcing strong credential management, and monitoring for unusual command execution activity on affected devices. Replacement of affected hardware with supported models should be considered.