A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be exploited after authenticating with an administrator-privileged service account.CreditsHackerprimeMalacupaReferenceshttps://www.axis.com/dam/public/41/7d/0f/cve-2026-4757pdf-en-US-543642.pdf
