CVE-2025-39246: Hikvision Hikcentral Focsign

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

• Hikvision Hikcentral Focsign

Published 2025-08-29. Last modified 2026-06-17.