CVE-2026-4757

Published: Aug 11, 2026Modified: Sep 3, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: product-security@axis.com (Secondary)

Description

A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be exploited after authenticating with an administrator-privileged service account.

Related CWEs

CWE-732

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (1)

https://www.axis.com/dam/public/41/7d/0f/cve-2026-4757pdf-en-US-543642.pdf

Source: product-security@axis.com

Timeline

No history available yet.