CVE-2026-13409: Medium severity vulnerability
Published Nov 10, 2026
·Updated
The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality. This flaw can only be exploited after authenticating with an operator or admin-privileged service account.
Event History
Nov 10, 2026
CVE Published
via MITRE·05:15 AM
Data Sourced
via MITRE·05:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access is required to exploit this issue?
An attacker must authenticate using a service account with operator or administrator privileges. Unauthenticated attackers cannot exploit it based on the available information.
2
What is the impact of successful exploitation?
Successful exploitation causes a denial of service affecting overlay functionality. The provided severity vector indicates no stated confidentiality or integrity impact, with availability impact limited to the affected functionality.