Medium
4.3
The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay...
CVE-2026-13409
First seen on SecPulse
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Axis Communications ABAXIS OS |
≥ 13.0.0, < 13.0.31→ 13.0.31 ≥ 12.0.0, < 12.11.84→ 12.11.84 ≥ 11.0.0, < 11.11.218→ 11.11.218 ≥ 10.0.0, < 10.12.345→ 10.12.345 ≥ 9.0.0, < 9.80.148→ 9.80.148 |
13.0.31 12.11.84 11.11.218 10.12.345 9.80.148 |
Original description The description as published by the source.
The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality. This flaw can only be exploited after authenticating with an operator or admin-privileged service account.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web product-security@axis.com
- web nvd.nist.gov
- web github.com