Improper Input Validation Vulnerability in Axis Communications VAPIX API
CVE-2026-4757

7.2HIGH

Key Information:

Vendor: Axis Communications Ab
Status: Axis Os
Vendor: CVE Published:; 11 August 2026

🔔 Create Axis Communications Ab Vulnerability Alert

What is CVE-2026-4757?

The Axis Communications VAPIX API contains an improper input validation flaw that may allow an authenticated user, with administrator privileges, to execute arbitrary code and potentially escalate their privileges. This vulnerability requires an individual to log in with an administrator-privileged service account, making it imperative for users to assess their security measures surrounding access controls.

Affected Version(s)

AXIS OS 12.0.0 < 12.11.44

References

https://www.axis.com/dam/public/41/7d/0f/cve-2026-4757pdf...

CVSS V3.1

Score:

7.2

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 11, 2026
Vulnerability Reserved
Mar 24, 2026

Credit

Hackerprime

Malacupa

CVE-2026-4757 Data

JSON