CVE-2026-1241: Pelco, Inc. Sarix Professional IMP 3 Series

Описание

Оригинално описание

The Pelco, Inc. Sarix Professional 3 Series Cameras are vulnerable to an authentication bypass issue in their web management interface. The flaw stems from inadequate enforcement of access controls, allowing certain functionality to be accessed without proper authentication. This weakness can lead to unauthorized viewing of live video streams, creating privacy concerns and operational risks for organizations relying on these cameras. Additionally, it may expose operators to regulatory and compliance challenges.

Засегнати продукти

• Pelco, Inc. Sarix Professional IMP 3 Series: до 02.52
• Pelco, Inc. Sarix Professional IXP 3 Series: до 02.52
• Pelco, Inc. Sarix Professional IBP 3 Series: до 02.52
• Pelco, Inc. Sarix Professional IWP 3 Series: до 02.52

Вид слабост

• CWE-288 Заобикаляне на автентикация през алтернативен път или канал

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-1241
• https://nvd.nist.gov/vuln/detail/CVE-2026-1241
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-02