CVE-2021-36260 Hikvision IP Camera Command Injection via /SDK/webLanguage

Ibrahim Saud@tektrix

•updated Jun 28, 2026•0•0•9

Detects inbound HTTP POST requests directed at the /SDK/webLanguage path, which is known to be vulnerable to command injection via CVE-2021-36260 in Hikvision IP cameras.