{"affected":[{"defaultStatus":"unaffected","product":"AXIS OS","source":"CNA: Axis","vendor":"Axis Communications AB","versions":[{"lessThan":"13.0.83","status":"affected","version":"13.0.0","versionType":"semver"},{"lessThan":"12.11.123","status":"affected","version":"12.0.0","versionType":"semver"},{"lessThan":"11.11.228","status":"affected","version":"11.0.0","versionType":"semver"},{"lessThan":"10.12.352","status":"affected","version":"10.0.0","versionType":"semver"}]}],"cveId":"CVE-2026-14542","cwes":["CWE-1287"],"description":"The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege\nescalation. This flaw can only be exploited after authenticating with an admin-privileged service\naccount.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.7,"severity":"medium","source":"CNA: Axis","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794287865674,"publishedAt":1794287865674,"references":[{"source":"CNA: Axis","tags":[],"url":"https://www.axis.com/dam/public/12/1f/f8/cve-2026-14542pdf-en-US-561256.pdf"}],"remediation":[],"revision":"44daad138980e7fedd088e69afcbe11f70b9ecdcf3117cc4aabb90848fc4a7c2","sources":[{"modifiedAt":1794287865674,"name":"CNA: Axis","retrievedAt":1794290923731,"url":"https://www.cve.org/CVERecord?id=CVE-2026-14542"}],"ssvc":null,"status":"published","title":"CVE-2026-14542","updatedAt":1794290923731}