CVE-2026-57599 describes a privilege escalation vulnerability in certain Hikvision DS-2CD Series cameras. The vulnerability is due to improper permission allocation within the device's program, which enables attackers who have authenticated via SSH with some privileges to escalate their privileges and gain full control over the device. The CVSS 3.1 base score is 6.6, reflecting network attack vector, high attack complexity, required high privileges, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits have been reported.

An attacker with existing SSH access and some privileges can escalate to full control of the affected device. This could lead to complete compromise of the device's confidentiality, integrity, and availability. The vulnerability requires prior authentication and has a high attack complexity, limiting ease of exploitation. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict SSH access to trusted users only and monitor for unauthorized access attempts. Avoid exposing device SSH interfaces to untrusted networks.