Hikvision

Hybrid SAN: listed models

Response status

PHP-disabling patch available

Response information checked

2026-10-27

Current re-audit: Source inaccessible; on hold · Research date: 2026-10-27

Video surveillance and storage equipment vendor.

For listed models atV2.3.9-8 or earlier, a patch disables PHP by default. A PHP-upgrade patch remains under validation.

Scope: Limited to listed models. Patch availability does not establish installation; Cluster Storage has a separate support route.

Some official sources could not be retrieved. Reverification remains on hold and the previous verification date is retained.

What users should do

Match the model; versions belowV2.3.4-2 must first upgrade to that version before the specified patch.

Official service URL

• https://www.hikvision.com/

Source URLs

1. HSRC-202610-01: PHP2Shell mitigationshttps://www.hikvisionjapan.com/php-security-advisory/Response evidence
2. Company and operator informationhttps://www.hikvisionjapan.com/about/Service and operation documentation
3. https://www.hikvisionjapan.com/notice/https://www.hikvisionjapan.com/notice/Service and operation documentation

Cluster Storage: listed models

Response status

Individual firmware assistance offered

Response information checked

2026-10-27

Current re-audit: Source inaccessible; on hold · Research date: 2026-10-27

For listed models atV1.1.4 or earlier, support/sales supplies applicable firmware and deployment assistance individually.

Scope: Do not reuse Hybrid SAN patch steps. Device remediation requires confirming actual installation.

Some official sources could not be retrieved. Reverification remains on hold and the previous verification date is retained.

What users should do

Check the exact model/version against the advisory table and contact support.

Source URLs

1. HSRC-202610-01: PHP2Shell mitigationshttps://www.hikvisionjapan.com/php-security-advisory/Response evidence