CVE-2026-1241

Authentication Bypass Using an Alternate Path or Channel in Pelco, Inc. Sarix Pro 3 Series IP Cameras

State: Published
Severity: 8.7 High
Published: Feb 26, 2026
Updated: Feb 26, 2026
Reserved: Jan 20, 2026

Description

The Pelco, Inc. Sarix Professional 3 Series Cameras are vulnerable to an authentication bypass issue in their web management interface. The flaw stems from inadequate enforcement of access controls, allowing certain functionality to be accessed without proper authentication. This weakness can lead to unauthorized viewing of live video streams, creating privacy concerns and operational risks for organizations relying on these cameras. Additionally, it may expose operators to regulatory and compliance challenges.

Scores

CVSS	Score	Vector	Source
4.0	8.7 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N	icscert

Weaknesses

CWE-288 Authentication Bypass Using an Alternate Path or Channel

Affected Products

Product	Versions
Sarix Professional IMP 3 SeriesPelco, Inc.	02.52 and earlierAffected
Sarix Professional IXP 3 SeriesPelco, Inc.	02.52 and earlierAffected
Sarix Professional IBP 3 SeriesPelco, Inc.	02.52 and earlierAffected
Sarix Professional IWP 3 SeriesPelco, Inc.	02.52 and earlierAffected

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-02

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.