{"id":"CVE-2026-13312","published":"2026-11-10T06:17:08.587","lastModified":"2026-11-10T06:17:08.587","description":"A vulnerability that could allow an attacker to compromise a system.","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-1287"],"vendors":[],"products":[],"references":[{"url":"https://www.axis.com/dam/public/e4/2d/85/cve-2026-13312pdf-en-US-561251.pdf","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"CVE-2026-13312 is a critical authentication bypass vulnerability (CWE-1287) that allows an authenticated low-privilege user to escalate privileges and gain full system compromise due to improper validation of access controls.","exploitability":"Exploitation requires valid low-privilege credentials and no user interaction, making it highly exploitable by compromised or insider accounts.","blast_radius":"Successful exploitation grants full confidentiality, integrity, and availability impact across the affected system, potentially enabling lateral movement or persistent backdoor access.","remediation":"No fixed version or patch level is specified in the published description; apply vendor-recommended workarounds immediately—restrict access to administrative endpoints via network segmentation and enforce strict role-based access controls until a patch is available.","detection":"Monitor for anomalous privilege escalation events in authentication logs, such as low-privilege users accessing high-privilege API endpoints or modifying system configuration files without proper authorization trails. No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","auth-bypass","web","api"],"model":"garnet-coder","analyzedAt":"2026-11-10T09:42:47.186Z"}}