CVE record · 1 source
CVE-2026-14542
CVSS 6.7The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalation.
- Vendor
- Axis Communications
- Product
- AXIS OS
- CVSS v3.1
- 6.7 AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weakness
- CWE-1287
- Exposure class
- OT / ICS
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalation.
The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalation. This flaw can only be exploited after authenticating with an admin-privileged service account.