Skip to contentAxis Communications Ab Os vulnerabilities
- axis communications ab osImproper shell quote escaping when processing user-controlled input, potentially allowing command...CVE-2026-632826.5 Medium
- axis communications ab osThe VAPIX Edge storage API, enabling the escalation of user privileges by circumventing...CVE-2026-145433.9 Low
- axis communications ab osThe VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead...CVE-2026-145426.7 Medium
- axis communications ab osThe VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay...CVE-2026-134094.3 Medium
- axis communications ab osA locally authenticated user can achieve privilege escalation via an insecure configuration that...CVE-2026-90636.7 Medium
- axis communications ab osA VAPIX API parameter had improper input validation which could allow code execution and...CVE-2026-47577.2 High
- axis communications ab osThe ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could...CVE-2026-65055.1 Medium
- axis communications ab osAn ACAP configuration file lacks input validation, which could potentially lead to privilege...CVE-2026-53045.7 Medium
- axis communications ab osThe ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could...CVE-2026-53035.7 Medium
- axis communications ab osThe Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can...CVE-2026-61815.9 Medium
- axis osA configuration file on the local file system had improper input validation which could allow...CVE-2026-11855.4 Medium
- axis osAn ACAP configuration file lacked sufficient input validation, which could allow a path traversal...CVE-2026-08046.7 Medium
- axis osAn ACAP configuration file lacked sufficient input validation, which could allow command...CVE-2026-08026.0 Medium
- axis osACAP applications can gain elevated privileges due to improper input validation during the...CVE-2026-05416.7 Medium
- axis osThe VAPIX API mediaclip.cgi that did not have a sufficient input validation allowing for a...CVE-2025-11142Public exploit7.1 High
- axis communications ab osThe VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator...CVE-2025-90556.4 Medium
- axis communications ab osIt was possible to upload files with a specific name to a temporary directory, which may result...CVE-2025-89983.1 Low
- axis communications ab osThe VAPIX API port.cgi did not have sufficient input validation, which may result in process...CVE-2025-95244.3 Medium
- axis osAn ACAP configuration file has improper permissions and lacks input validation, which could...CVE-2025-81086.7 Medium
- axis osAn ACAP configuration file has improper permissions, which could allow command injection and...CVE-2025-67796.7 Medium
- axis communications ab osA 3rd-party component exposed its password in process arguments, allowing for low-privileged...CVE-2025-65716.0 Medium
- axis osA malicious ACAP application can gain access to admin-level service account credentials used by...CVE-2025-54526.6 Medium
- axis osACAP applications can gain elevated privileges due to improper input validation, potentially...CVE-2025-62986.7 Medium
- axis osThe ACAP Application framework could allow privilege escalation through a symlink attack. This...CVE-2025-57186.8 Medium
- axis osAn ACAP configuration file lacked sufficient input validation, which could allow a path traversal...CVE-2025-54546.4 Medium
- axis osAn ACAP configuration file lacked sufficient input validation, which could allow for arbitrary...CVE-2025-46456.7 Medium
- axis osAn ACAP configuration file lacked sufficient input validation, which could allow for arbitrary...CVE-2025-300276.7 Medium
- axis osACAP applications can be executed with elevated privileges, potentially leading to privilege...CVE-2025-38926.7 Medium
- axis osDuring an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a...CVE-2025-03588.8 High
- axis communications ab osA Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly...CVE-2025-03254.3 Medium
- axis os, os 2024 +1 moreThe VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower...CVE-2025-0324Public exploit9.4 Critical
- axis os, os 2024 +1 moreDuring an annual penetration test conducted on behalf of Axis Communications, Truesec discovered...CVE-2025-03614.3 Medium
- axis os, os 2022, os 2024 +2 more51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API...CVE-2024-472614.3 Medium
- axis os, os 2024 +1 moreDuring an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a...CVE-2025-03607.8 High
- axis os, os 2024 +1 moreDuring an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a...CVE-2025-03598.5 High
- axis communications ab osDzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API param...CVE-2024-472625.3 Medium
- axis communications ab os51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API mediaclip.cgi did...CVE-2024-472606.5 Medium
- axis os, os 2024 +1 moreGirishunawane, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API...CVE-2024-472593.5 Low
- axis os, os 2022, os 2024 +2 moreErik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi...CVE-2024-81603.8 Low
- axis communications ab os51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API...CVE-2024-87724.3 Medium
- axis osDuring internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the...CVE-2024-77846.1 Medium
- axis os, os 2024 +1 moreAmin Aliakbari, member of the AXIS OS Bug Bounty Program, has found a broken access control which...CVE-2024-69796.8 Medium
- axis communications ab os51l3nc3, member of the AXIS OS Bug Bounty Program, has found that a Guard Tour VAPIX API...CVE-2024-61736.5 Medium
- axis communications ab osMarinus Pfund, member of the AXIS OS Bug Bounty Program,
has found the VAPIX API alwaysmulti.cgi...CVE-2024-65096.5 Medium
- axis communications ab osMarinus Pfund, member of the AXIS OS Bug Bounty Program,
has found the VAPIX API ledlimit.cgi...CVE-2024-00674.3 Medium
- axis os, os 2020, os 2022 +2 moreJohan Fagerström, member of the AXIS OS Bug Bounty Program, has found that a O3C feature may...CVE-2024-00665.3 Medium
- axis os, os 2022 +1 moreSandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip...CVE-2024-00556.5 Medium
- axis communications ab osSandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs local_list...CVE-2024-00546.5 Medium
- axis os, os 2020, os 2022 +2 moreInsufficient input validation in VAPIX API create_overlay.cgiCVE-2023-58005.4 Medium
- axis communications ab os, axis m3024-lve firmware, m3025-ve firmware +9 more +11 moreBrandon
Rothel from QED Secure Solutions has found that the VAPIX API tcptest.cgi
did not have a...CVE-2023-56776.3 Medium
- Show olderLoading…