CVE-2026-1241 — Authentication Bypass Using an Alternate Path or Channel in Pelco, Inc. Sarix Pro 3 Series IP Cameras

Description (CNA)

The Pelco, Inc. Sarix Professional 3 Series Cameras are vulnerable to an authentication bypass issue in their web management interface. The flaw stems from inadequate enforcement of access controls, allowing certain functionality to be accessed without proper authentication. This weakness can lead to unauthorized viewing of live video streams, creating privacy concerns and operational risks for organizations relying on these cameras. Additionally, it may expose operators to regulatory and compliance challenges.

Affected (CNA)

Vendor / product	Versions
Pelco, Inc. / Sarix Professional IMP 3 Series	affected 0 through 02.52
Pelco, Inc. / Sarix Professional IXP 3 Series	affected 0 through 02.52
Pelco, Inc. / Sarix Professional IBP 3 Series	affected 0 through 02.52
Pelco, Inc. / Sarix Professional IWP 3 Series	affected 0 through 02.52

CWE

CWE-288

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-02

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.