Axis Communications Ab vulnerabilities

Products

• Os 62
• Camera Station Pro 23
• Camera Station 7
• License Plate Verifier 6
• Camera Station 5 4
• Device Manager 4
• A1001 Network Door Controller 2
• File Player 2
• Signed Media Verifier 2
• Signed Video Framework 2

Newest

• axis communications ab camera station 5, camera station pro +1 more It was possible for an authenticated non-admin user to modify certain data objects without having... CVE-2026-63287 6.5 MediumNovember 10, 2026
• axis communications ab camera station pro A vulnerability related to URL redirection handling during the sign-out flow that could allow a... CVE-2026-13387 3.5 LowNovember 10, 2026
• axis communications ab camera station 5, camera station pro +1 more A vulnerability that could allow an attacker to compromise a system. CVE-2026-13312 9.9 CriticalNovember 10, 2026
• axis communications ab camera station pro A vulnerability allowing for privileged escalation of the viewer account to gain administrator... CVE-2026-12964 8.0 HighNovember 10, 2026
• axis communications ab camera station 5, camera station pro +1 more A vulnerability that could allow a viewer account to gain unauthorized access to network attached... CVE-2026-12963 7.4 HighNovember 10, 2026
• axis communications ab camera station pro A vulnerability that could lead to a high privileged authenticated user performing a remote code... CVE-2026-12389 8.4 HighNovember 10, 2026
• axis communications ab camera station pro A vulnerability that could allow an attacker to gain unauthorized access. CVE-2026-8372 8.8 HighNovember 10, 2026
• axis communications ab camera station pro A vulnerability to perform a privilege escalation attack on the server as a non-admin user. CVE-2026-4762 8.8 HighNovember 10, 2026
• axis communications ab a1210 - secure entry, a1601 - secure entry, a1610 - secure entry +2 more +4 more A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API... CVE-2026-63288 8.3 HighNovember 10, 2026
• axis communications ab signed video framework, file player, signed media verifier +2 more The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework... CVE-2026-14918 5.3 MediumNovember 10, 2026
• axis communications ab os Improper shell quote escaping when processing user-controlled input, potentially allowing command... CVE-2026-63282 6.5 MediumNovember 10, 2026
• axis communications ab os The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing... CVE-2026-14543 3.9 LowNovember 10, 2026
• axis communications ab os The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead... CVE-2026-14542 6.7 MediumNovember 10, 2026
• axis communications ab os The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay... CVE-2026-13409 4.3 MediumNovember 10, 2026
• axis communications ab os A locally authenticated user can achieve privilege escalation via an insecure configuration that... CVE-2026-9063 6.7 MediumNovember 10, 2026
• axis communications ab camera station pro, camera station 5 +1 more Database backups are vulnerable to offline attacks. Backups created using a version prior to the... CVE-2026-63286 Public exploit 7.1 HighOctober 28, 2026
• axis communications ab os A VAPIX API parameter had improper input validation which could allow code execution and... CVE-2026-4757 7.2 HighAugust 11, 2026
• axis communications ab os The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could... CVE-2026-6505 5.1 MediumAugust 11, 2026
• axis communications ab os An ACAP configuration file lacks input validation, which could potentially lead to privilege... CVE-2026-5304 5.7 MediumAugust 11, 2026
• axis communications ab os The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could... CVE-2026-5303 5.7 MediumAugust 11, 2026
• axis communications ab signed video framework, file player, signed media verifier +2 more The Signed Video Framework contained a  buffer overflow issue which could lead the application... CVE-2026-8158 5.3 MediumAugust 11, 2026
• axis communications ab os The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can... CVE-2026-6181 5.9 MediumAugust 11, 2026
• axis os A configuration file on the local file system had improper input validation which could allow... CVE-2026-1185 5.4 MediumMay 12, 2026
• axis os An ACAP configuration file lacked sufficient input validation, which could allow a path traversal... CVE-2026-0804 6.7 MediumMay 12, 2026
• axis os An ACAP configuration file lacked sufficient input validation, which could allow command... CVE-2026-0802 6.0 MediumMay 12, 2026
• axis os ACAP applications can gain elevated privileges due to improper input validation during the... CVE-2026-0541 6.7 MediumMay 12, 2026
• axis camera station pro An insecure direct object reference allowed a non-admin user to modify or remove certain data... CVE-2025-12063 5.7 MediumFebruary 10, 2026
• axis camera station pro An AXIS Camera Station Pro feature can be exploited in a way that allows a non-admin user to view... CVE-2025-12757 4.6 MediumFebruary 10, 2026
• axis camera station pro A server-side injection was possible for a malicious admin to manipulate the application to... CVE-2025-13064 4.5 MediumFebruary 10, 2026
• axis camera station pro AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server... CVE-2025-11547 7.8 HighFebruary 10, 2026
• axis os The VAPIX API mediaclip.cgi that did not have a sufficient input validation allowing for a... CVE-2025-11142 Public exploit 7.1 HighFebruary 10, 2026
• axis communications ab os The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator... CVE-2025-9055 6.4 MediumNovember 11, 2025
• axis communications ab os It was possible to upload files with a specific name to a temporary directory, which may result... CVE-2025-8998 3.1 LowNovember 11, 2025
• axis communications ab os The VAPIX API port.cgi did not have sufficient input validation, which may result in process... CVE-2025-9524 4.3 MediumNovember 11, 2025
• axis communications ab optimizer AXIS Optimizer was vulnerable to an unquoted search path vulnerability, which could potentially... CVE-2025-10714 8.4 HighNovember 11, 2025
• axis os An ACAP configuration file has improper permissions and lacks input validation, which could... CVE-2025-8108 6.7 MediumNovember 11, 2025
• axis os An ACAP configuration file has improper permissions, which could allow command injection and... CVE-2025-6779 6.7 MediumNovember 11, 2025
• axis communications ab os A 3rd-party component exposed its password in process arguments, allowing for low-privileged... CVE-2025-6571 6.0 MediumNovember 11, 2025
• axis os A malicious ACAP application can gain access to admin-level service account credentials used by... CVE-2025-5452 6.6 MediumNovember 11, 2025
• axis os ACAP applications can gain elevated privileges due to improper input validation, potentially... CVE-2025-6298 6.7 MediumNovember 11, 2025
• axis os The ACAP Application framework could allow privilege escalation through a symlink attack. This... CVE-2025-5718 6.8 MediumNovember 11, 2025
• axis os An ACAP configuration file lacked sufficient input validation, which could allow a path traversal... CVE-2025-5454 6.4 MediumNovember 11, 2025
• axis os An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary... CVE-2025-4645 6.7 MediumNovember 11, 2025
• axis os An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary... CVE-2025-30027 6.7 MediumAugust 12, 2025
• axis os ACAP applications can be executed with elevated privileges, potentially leading to privilege... CVE-2025-3892 6.7 MediumAugust 12, 2025
• axis camera station, camera station pro +1 more During an internal security assessment, a Server-Side Request Forgery (SSRF) vulnerability that... CVE-2025-7622 5.1 MediumAugust 12, 2025
• axis camera station, camera station pro +1 more The AXIS Camera Station Server had a flaw that allowed to bypass authentication that is normally... CVE-2025-30026 5.3 MediumJuly 11, 2025
• axis camera station pro, device manager, axis communications ab camera station +2 more The communication protocol used between the server process and the service control had a flaw... CVE-2025-30025 4.8 MediumJuly 11, 2025
• axis device manager The communication protocol used between client and server had a flaw that could be leveraged to... CVE-2025-30024 6.8 MediumJuly 11, 2025
• axis camera station, camera station pro, device manager +2 more The communication protocol used between client and server had a flaw that could lead to an... CVE-2025-30023 9.0 CriticalJuly 11, 2025
• Show olderLoading…