CVE-2026-4757 — Axis Communications AB / AXIS OS

CVE-2026-4757

Axis Communications AB / AXIS OS PUBLISHED

Description (CNA)

A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be exploited after authenticating with an administrator-privileged service account.

Affected (CNA)

Vendor / product	Versions
Axis Communications AB / AXIS OS	affected 12.0.0 before 12.11.44

CWE

CWE-732

References

https://www.axis.com/dam/public/41/7d/0f/cve-2026-4757pdf-en-US-543642.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.