Vulnerability · Published Feb 26, 2026 · Assigned by icscert
CVE-2026-1241Authentication Bypass Using an Alternate Path or Channel in Pelco, Inc. Sarix Pro 3 Series IP Cameras
High 8.7
In plain English
A high-severity authentication bypass in Sarix Professional IBP 3 Series from Pelco, Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).
Official description
The Pelco, Inc. Sarix Professional 3 Series Cameras are vulnerable to an authentication bypass issue in their web management interface. The flaw stems from inadequate enforcement of access controls, allowing certain functionality to be accessed without proper authentication. This weakness can lead to unauthorized viewing of live video streams, creating privacy concerns and operational risks for organizations relying on these cameras. Additionally, it may expose operators to regulatory and compliance challenges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Pelco, Inc. | Sarix Professional IMP 3 Series | 0 – through 02.52 |
| Pelco, Inc. | Sarix Professional IXP 3 Series | 0 – through 02.52 |
| Pelco, Inc. | Sarix Professional IBP 3 Series | 0 – through 02.52 |
| Pelco, Inc. | Sarix Professional IWP 3 Series | 0 – through 02.52 |
Weakness: CWE-288 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N