PT-2026-5393 · Hiksemi · Hiksemi Nas

Jincheng Wang · CVE-2026-22625 · Published 2026-01-30 · Updated 2026-02-27

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HIKSEMI NAS products (affected versions not specified)

Description A flaw exists in certain HIKSEMI NAS products due to improper handling of filenames. This can result in the disclosure of sensitive system files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-22625

Affected Products

Hiksemi Nas

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-22625 · Security Note
• https://hiksemitech.com/en/hiksemi/support/security-advisory.html · Note
• https://t.me/CVEtracker/43278 · Telegram Post
• https://t.me/cveNotify/150385 · Telegram Post
• https://t.me/cveNotify/153513 · Telegram Post
• https://twitter.com/CVEnew/status/2017204587586023479 · Twitter Post