CVE-2026-4757

A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be exploited after authenticating with an administrator-privileged service account.

Score

CVSS 3.1 7.2 High

Status

Awaiting Analysis - product-security@axis.com

Published

2026-08-11

Last modified

2026-10-23

Weaknesses

CWE-732

Affected products

• Axis Os (Axis Communications Ab)

References

• https://www.axis.com/dam/public/41/7d/0f/cve-2026-4757pdf-en-US-543642.pdf