Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-13409 EUVD-2026-120770GHSA-qf9x-fppw-p385

The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality. This flaw can only be exploited after a…

Published Nov 10, 2026 · Updated Nov 12, 2026 · Assigned by Axis

Vendor: Axis Communications AB Product: AXIS OS

Description

The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality. This flaw can only be exploited after authenticating with an operator or admin-privileged service account.

Affected products

VendorProductAffectedFixed
Axis Communications AB AXIS OS 13.0.0 – < 13.0.31, 12.0.0 – < 12.11.84, 11.0.0 – < 11.11.218, 10.0.0 – < 10.12.345, 9.0.0 – < 9.80.148 13.0.31

References