CVE-2026-4757: Axis Communications Ab Axis OS

High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days.

A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be exploited after authenticating with an administrator-privileged service account.

Affected products

• Axis Communications Ab Axis OS: from 12.0.0, before 12.11.44 (fixed in 12.11.44)

Published 2026-08-11. Last modified 2026-09-03.