CVE-2026-14543: Low severity vulnerability
Published Nov 10, 2026
·Updated
The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting unauthorized access to protected system resources. This flaw can only be exploited after authenticating with an admin-privileged service account.
Event History
Nov 10, 2026
CVE Published
via MITRE·05:20 AM
Data Sourced
via MITRE·05:20 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
Exploitation requires prior authentication with an admin-privileged service account. It is not described as reachable by unauthenticated or lower-privileged users.
2
What access could a successful attacker obtain?
A successful attacker can circumvent filesystem isolation through the VAPIX Edge storage API and gain unauthorized access to protected system resources. The stated impact is confidentiality loss; integrity and availability impacts are not indicated.