{"id":"CVE-2026-4762","published":"2026-11-10T06:17:09.757","lastModified":"2026-11-10T06:17:09.757","description":"A vulnerability to perform a privilege escalation attack on the server as a non-admin user.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-347"],"vendors":[],"products":[],"references":[{"url":"https://www.axis.com/dam/public/1f/4b/66/cve-2026-4762pdf-en-US-561246.pdf","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"CVE-2026-4762 is a privilege escalation vulnerability in which a non-admin user can gain elevated privileges on the server due to a cryptographic weakness (CWE-347: Improper Verification of Cryptographic Signature). This allows an attacker to bypass access controls and perform actions reserved for administrators.","exploitability":"Exploitation requires local access with low privileges and no user interaction, but the exact technical method is not disclosed in the public description.","blast_radius":"Successful exploitation grants full administrative control over the affected server, enabling complete compromise of confidentiality, integrity, and availability.","remediation":"No fixed version or patch level is specified in the published description; apply vendor-recommended mitigations immediately—restrict local access to the affected component, disable non-admin functionality requiring cryptographic verification until patched, and monitor for unauthorized privilege changes.","detection":"Defenders should monitor for anomalous privilege escalation events in system authentication logs (e.g., unexpected elevation from low-privilege user to admin role without corresponding admin action), especially when accompanied by failed signature validation errors or unusual API calls to privileged endpoints. No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","crypto-bypass","local-exploit","cwe347"],"model":"garnet-coder","analyzedAt":"2026-11-10T09:49:03.403Z"}}