---
id: "CVE-2026-14543"
page: "https://infrastack.ai/live/CVE-2026-14543"
kind: "vulnerability"
aliases: ["CVE-2026-14543"]
title: "Axis VAPIX Edge storage API lets admins escape filesystem isolation"
severity: "low"
cvss: 3.9
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["axis", "edge-devices", "infrastructure", "iot", "vapix"]
not_affected_if: ["no-admin-service-accounts", "no-axis-devices"]
published_at: "2026-11-10T06:17:09+00:00"
first_seen_at: "2026-11-10T06:20:23+00:00"
updated_at: "2026-11-10T06:22:21+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14543", "first_seen_at": "2026-11-10T06:20:23+00:00"}]
exploit_sources: []
---

# Axis VAPIX Edge storage API lets admins escape filesystem isolation

Link for people: https://infrastack.ai/live/CVE-2026-14543 (this .md is for agents)

The VAPIX Edge storage API in Axis network devices can be abused to bypass filesystem isolation and reach protected system resources. Exploitation requires authenticating first with an admin-privileged service account.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T06:20:23+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-14543

## From the sources

The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting unauthorized access to protected system resources. This flaw can only be exploited after authenticating with an admin-privileged service account.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_