CVE-2026-1241: Authentication Bypass Using an Alternate Path or Channel in Pelco, Inc. Sarix Pro 3 Series IP Cameras

Published Feb 26, 2026

Updated

The Pelco, Inc. Sarix Professional 3 Series Cameras are vulnerable to an authentication bypass issue in their web management interface. The flaw stems from inadequate enforcement of access controls, allowing certain functionality to be accessed without proper authentication. This weakness can lead to unauthorized viewing of live video streams, creating privacy concerns and operational risks for organizations relying on these cameras. Additionally, it may expose operators to regulatory and compliance challenges.

Affected Software

1 affected component

Pelco Sarix Pro 3 Series IP Cameras

Remediation

Information

Pelco, Inc. recommends that all Sarix Professional 3 Series Camera users update their camera firmware to version 02.53 or later. Installing the latest firmware ensures your device receives the most up-to-date bug fixes and critical security enhancements. More information can be found by visiting Pelco, Inc's technical support page ( https://www.pelco.com/support ) for assistance.

Event History

Feb 26, 2026

CVE Published

via MITRE·07:21 PM

Data Sourced

via MITRE·07:21 PM

RemedyDescriptionWeakness

Data Sourced

via NVD·08:31 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-1241?

CVE-2026-1241 has been designated a high severity vulnerability due to its potential for unauthorized access.

How do I fix CVE-2026-1241?

To fix CVE-2026-1241, update your Pelco Sarix Pro 3 Series IP Cameras to the latest firmware that addresses the authentication bypass issue.

What systems are affected by CVE-2026-1241?

CVE-2026-1241 affects Pelco Sarix Pro 3 Series IP Cameras specifically through their web management interface.

What are the potential risks of CVE-2026-1241?

The risks of CVE-2026-1241 include unauthorized users gaining access to the camera's management interface, which could lead to privacy breaches.

Is CVE-2026-1241 being actively exploited?

As of now, there have been no confirmed reports of active exploitation of CVE-2026-1241, but it remains a critical vulnerability that should be addressed promptly.