Skip to content
OpenAdvisories
High · 8.7 CVE-2026-1241 EUVD-2026-8874GHSA-x79r-7fxv-8xh2

Authentication Bypass Using an Alternate Path or Channel in Pelco, Inc. Sarix Pro 3 Series IP Cameras

Published Feb 26, 2026 · Updated Feb 26, 2026 · Assigned by icscert

Description

The Pelco, Inc. Sarix Professional 3 Series Cameras are vulnerable to an authentication bypass issue in their web management interface. The flaw stems from inadequate enforcement of access controls, allowing certain functionality to be accessed without proper authentication. This weakness can lead to unauthorized viewing of live video streams, creating privacy concerns and operational risks for organizations relying on these cameras. Additionally, it may expose operators to regulatory and compliance challenges.

Affected products

VendorProductAffectedFixed
Pelco Sarix Professional IMP 3 Series ≤ 02.52 —
Pelco Sarix Professional IXP 3 Series ≤ 02.52 —
Pelco Sarix Professional IBP 3 Series ≤ 02.52 —
Pelco Sarix Professional IWP 3 Series ≤ 02.52 —

Advisories 1

References