Description
The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege
escalation. This flaw can only be exploited after authenticating with an admin-privileged service
account.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Axis Communications AB | AXIS OS | 13.0.0 – < 13.0.83, 12.0.0 – < 12.11.123, 11.0.0 – < 11.11.228, 10.0.0 – < 10.12.352 | 13.0.83 |
Advisories 1
- WID-SEC-2026-4450 Axis Axis OS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 10, 2026