CVE-2026-14543
The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting unauthorized access t
CVSS
3.9
Low
EPSS
—
KEV
—
Exploit Today
—
0-100
Published: Nov 10, 2026 · Last modified: Nov 10, 2026 · CWE-732 · CWE-1287
Not enough EPSS history yet.
The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting unauthorized access to protected system resources. This flaw can only be exploited after authenticating with an admin-privileged service account.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-632826.5 MED—
———Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which could lead to privilege escalation.6hCVE-2026-145426.7 MED—
———The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege
escalation. This flaw can only be exploited after authenticating with an admin-privileged service
account.6hCVE-2026-133129.9 CRI—
———A vulnerability that could allow an attacker to compromise a system.6hCVE-2026-129637.4 HIG—
———A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on the server.6hCVE-2026-1121257.3 HIG—
———Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor.
This issue affects HA Monitor: from 01-00 before 01-83-01.7hCVE-2026-7696410.0 CRI—
———SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionality. Successful exploitation could allow the attacker to execute arbitrary code and fully compromise the system, resulting in a high impact on confidentiality, integrity and availability of the system.11h