Privilege Escalation Vulnerability in VAPIX SIP Configuration API of Axis Products
CVE-2026-14542

6.7MEDIUM

Key Information:

Vendor: Axis Communications Ab
Status: Axis Os
Vendor: CVE Published:; 10 November 2026

🔔 Create Axis Communications Ab Vulnerability Alert

What is CVE-2026-14542?

The VAPIX SIP configuration API has a significant input validation flaw that could enable privilege escalation. This vulnerability requires an authenticated session with an admin-privileged service account to exploit, potentially allowing unauthorized users to escalate their privileges and gain access to sensitive information or systems within Axis products. Proper input validation and security measures are critical to mitigate this risk.

Affected Version(s)

AXIS OS 13.0.0 < 13.0.83

AXIS OS 12.0.0 < 12.11.123

AXIS OS 11.0.0 < 11.11.228

References

https://www.axis.com/dam/public/12/1f/f8/cve-2026-14542pd...

CVSS V3.1

Score:

6.7

Severity:

MEDIUM

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 10, 2026
Vulnerability Reserved
Jul 3, 2026

Credit

J34nsh33

CVE-2026-14542 Data

JSON