Bug 2513773 (CVE-2026-4757) - CVE-2026-4757 Axis: Axis: Code execution and privilege escalation via VAPIX API improper input validation
Summary: CVE-2026-4757 Axis: Axis: Code execution and privilege escalation via VAPIX A...
Keywords:
Status: NEW
Alias: CVE-2026-4757
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-08-11 06:01 UTC by OSIDB Bzimport
Modified: 2026-08-24 12:55 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-08-11 06:01:23 UTC 
A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be exploited after authenticating with an administrator-privileged service account.
Note You need to log in before you can comment on or make changes to this bug.