WiFi Hijack: Hikvision Patches Command Injection in DS-3WAP Access Points

Hikvision patched a high-severity authenticated command-execution vulnerability (CVE-2026-0709, CVSS 7.2) affecting multiple DS-3WAP series wireless access points (firmware V1.1.6303 build250812 and earlier). The flaw, caused by insufficient input validation, allows an authenticated user to send crafted packets to execute arbitrary commands on the device, enabling interception, lateral movement, or disruption; administrators are urged to update affected devices to V1.1.6601 build251223 immediately.