CVE-2026-14542: Input Validation
Published Nov 10, 2026
·Updated
The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalation. This flaw can only be exploited after authenticating with an admin-privileged service account.
Event History
Nov 10, 2026
CVE Published
via MITRE·05:17 AM
Data Sourced
via MITRE·05:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
Exploitation requires authentication with an admin-privileged service account. It is therefore not exploitable by unauthenticated users based on the available information.
2
What access does an attacker gain from successful exploitation?
The issue could lead to privilege escalation. The supplied severity vector indicates potential high impact to confidentiality, integrity, and availability.
3
Is this remotely exploitable?
The severity vector lists local access as the attack vector. The available information does not describe a network-based exploitation path.