CVE-2024-47487: Hikvision Hikcentral Professional

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

There is a SQL injection vulnerability in some HikCentral Professional versions. This could allow an authenticated user to execute arbitrary SQL queries.

Affected products

• Hikvision Hikcentral Professional: from 2.0.0, before 2.6.1 (fixed in 2.6.1)

Published 2024-10-18. Last modified 2026-06-17.