Medium
6.7
The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead...
CVE-2026-14542
First seen on SecPulse
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Axis Communications ABAXIS OS |
≥ 13.0.0, < 13.0.83→ 13.0.83 ≥ 12.0.0, < 12.11.123→ 12.11.123 ≥ 11.0.0, < 11.11.228→ 11.11.228 ≥ 10.0.0, < 10.12.352→ 10.12.352 |
13.0.83 12.11.123 11.11.228 10.12.352 |
Original description The description as published by the source.
The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege
escalation. This flaw can only be exploited after authenticating with an admin-privileged service
account.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web product-security@axis.com
- web nvd.nist.gov
- web github.com