Skip to content
Axis vulnerabilities
Products
Show 160 moreShow less
Newest
-
axis os
A configuration file on the local file system had improper input validation which could allow...
CVE-2026-1185
5.4 Medium
-
axis os
An ACAP configuration file lacked sufficient input validation, which could allow a path traversal...
CVE-2026-0804
6.7 Medium
-
axis os
An ACAP configuration file lacked sufficient input validation, which could allow command...
CVE-2026-0802
6.0 Medium
-
axis os
ACAP applications can gain elevated privileges due to improper input validation during the...
CVE-2026-0541
6.7 Medium
-
axis camera station pro
An insecure direct object reference allowed a non-admin user to modify or remove certain data...
CVE-2025-12063
5.7 Medium
-
axis camera station pro
An AXIS Camera Station Pro feature can be exploited in a way that allows a non-admin user to view...
CVE-2025-12757
4.6 Medium
-
axis camera station pro
A server-side injection was possible for a malicious admin to manipulate the application to...
CVE-2025-13064
4.5 Medium
-
axis camera station pro
AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server...
CVE-2025-11547
7.8 High
-
axis os
The VAPIX API mediaclip.cgi that did not have a sufficient input validation allowing for a...
CVE-2025-11142
Public exploit
7.1 High
-
axis os
An ACAP configuration file has improper permissions and lacks input validation, which could...
CVE-2025-8108
6.7 Medium
-
axis os
An ACAP configuration file has improper permissions, which could allow command injection and...
CVE-2025-6779
6.7 Medium
-
axis os
A malicious ACAP application can gain access to admin-level service account credentials used by...
CVE-2025-5452
6.6 Medium
-
axis os
ACAP applications can gain elevated privileges due to improper input validation, potentially...
CVE-2025-6298
6.7 Medium
-
axis os
The ACAP Application framework could allow privilege escalation through a symlink attack. This...
CVE-2025-5718
6.8 Medium
-
axis os
An ACAP configuration file lacked sufficient input validation, which could allow a path traversal...
CVE-2025-5454
6.4 Medium
-
axis os
An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary...
CVE-2025-4645
6.7 Medium
-
axis os
An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary...
CVE-2025-30027
6.7 Medium
-
axis os
ACAP applications can be executed with elevated privileges, potentially leading to privilege...
CVE-2025-3892
6.7 Medium
-
axis camera station, camera station pro +1 more
During an internal security assessment, a Server-Side Request Forgery (SSRF) vulnerability that...
CVE-2025-7622
5.1 Medium
-
axis camera station, camera station pro +1 more
The AXIS Camera Station Server had a flaw that allowed
to bypass authentication that is normally...
CVE-2025-30026
5.3 Medium
-
axis camera station pro, device manager, axis communications ab camera station +2 more
The communication protocol used between the
server process and the service control had a flaw...
CVE-2025-30025
4.8 Medium
-
axis device manager
The communication protocol used between client
and server had a flaw that could be leveraged to...
CVE-2025-30024
6.8 Medium
-
axis camera station, camera station pro, device manager +2 more
The communication protocol used between client and server had a flaw that could lead to an...
CVE-2025-30023
9.0 Critical
-
axis os
During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a...
CVE-2025-0358
8.8 High
-
axis os, os 2024 +1 more
The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower...
CVE-2025-0324
Public exploit
9.4 Critical
-
axis camera station pro
Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible...
CVE-2025-0926
5.9 Medium
-
axis camera station pro
Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a...
CVE-2025-1056
6.1 Medium
-
axis os, os 2024 +1 more
During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered...
CVE-2025-0361
4.3 Medium
-
axis os, os 2022, os 2024 +2 more
51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API...
CVE-2024-47261
4.3 Medium
-
axis os, os 2024 +1 more
During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a...
CVE-2025-0360
7.8 High
-
axis os, os 2024 +1 more
During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a...
CVE-2025-0359
8.5 High
-
axis os, os 2024 +1 more
Girishunawane, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API...
CVE-2024-47259
3.5 Low
-
axis camera station pro
Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible...
CVE-2024-7696
6.3 Medium
-
axis os, os 2022, os 2024 +2 more
Erik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi...
CVE-2024-8160
3.8 Low
-
axis os
During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the...
CVE-2024-7784
6.1 Medium
-
axis os, os 2024 +1 more
Amin Aliakbari, member of the AXIS OS Bug Bounty Program, has found a broken access control which...
CVE-2024-6979
6.8 Medium
-
axis os, os 2020, os 2022 +2 more
Johan Fagerström, member of the AXIS OS Bug Bounty Program, has found that a O3C feature may...
CVE-2024-0066
5.3 Medium
-
axis os, os 2022 +1 more
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip...
CVE-2024-0055
6.5 Medium
-
axis os, os 2020, os 2022 +2 more
Insufficient input validation in VAPIX API create_overlay.cgi
CVE-2023-5800
5.4 Medium
-
axis communications ab os, axis m3024-lve firmware, m3025-ve firmware +9 more +11 more
Brandon
Rothel from QED Secure Solutions has found that the VAPIX API tcptest.cgi
did not have a...
CVE-2023-5677
6.3 Medium
-
axis os, os 2022 +1 more
During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the...
CVE-2023-5553
7.6 High
-
axis os, os 2018, os 2020 +1 more +3 more
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup...
CVE-2023-21418
7.1 High
-
axis os, os 2020, os 2022 +2 more
Sandro Poppi, member of the AXIS OS Bug Bounty Program,
has found that the VAPIX API...
CVE-2023-21417
7.1 High
-
axis os, os 2022 +1 more
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API...
CVE-2023-21416
7.1 High
-
axis os, os 2016, os 2018 +2 more +4 more
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del...
CVE-2023-21415
6.5 Medium
-
axis os, a8207-ve mk ii, q3527-lve +2 more
NCC Group has found a flaw during the annual internal penetration test ordered by Axis...
CVE-2023-21414
7.1 High
-
axis os
Remote code execution vulnerability during the installation of ACAP applications on the Axis device
CVE-2023-21413
9.1 Critical
-
axis license plate verifier
Non-sanitized user input could lead to SQL injections in AXIS License Plate Verifier
CVE-2023-21412
7.2 High
-
axis license plate verifier
Non-sanitized user input could lead to arbitrary code execution during Access Control configuration in AXIS License Plate Verifier
CVE-2023-21411
7.2 High
-
axis license plate verifier
Non-sanitized user input could lead to arbitrary code execution in AXIS License Plate Verifier
CVE-2023-21410
7.2 High
- Show olderLoading…