CVE-2026-4757
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be exploited after authenticating with an administrator-privileged service account.
Risk Assessment
Risk of privilege escalation and remote code execution, potentially leading to full system compromise, but only for authenticated administrators.
Recommendation
Apply vendor patches to fix input validation and restrict API access to trusted administrators.
Original NVD description (English source)
A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be exploited after authenticating with an administrator-privileged service account.