Medium severity4.3NVD Advisory· Published Nov 10, 2026

CVE-2026-13409

Description

The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality. This flaw can only be exploited after authenticating with an operator or admin-privileged service account.

Affected products

Axis/VAPIX APIllm-fuzzy

Patches

Vulnerability mechanics

References

www.axis.com/dam/public/ef/b3/81/cve-2026-13409pdf-en-US-561255.pdfnvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000