Axis Os vulnerabilities

• axis os A configuration file on the local file system had improper input validation which could allow... CVE-2026-1185 5.4 MediumMay 12, 2026
• axis os An ACAP configuration file lacked sufficient input validation, which could allow a path traversal... CVE-2026-0804 6.7 MediumMay 12, 2026
• axis os An ACAP configuration file lacked sufficient input validation, which could allow command... CVE-2026-0802 6.0 MediumMay 12, 2026
• axis os ACAP applications can gain elevated privileges due to improper input validation during the... CVE-2026-0541 6.7 MediumMay 12, 2026
• axis os The VAPIX API mediaclip.cgi that did not have a sufficient input validation allowing for a... CVE-2025-11142 Public exploit 7.1 HighFebruary 10, 2026
• axis os An ACAP configuration file has improper permissions and lacks input validation, which could... CVE-2025-8108 6.7 MediumNovember 11, 2025
• axis os An ACAP configuration file has improper permissions, which could allow command injection and... CVE-2025-6779 6.7 MediumNovember 11, 2025
• axis os A malicious ACAP application can gain access to admin-level service account credentials used by... CVE-2025-5452 6.6 MediumNovember 11, 2025
• axis os ACAP applications can gain elevated privileges due to improper input validation, potentially... CVE-2025-6298 6.7 MediumNovember 11, 2025
• axis os The ACAP Application framework could allow privilege escalation through a symlink attack. This... CVE-2025-5718 6.8 MediumNovember 11, 2025
• axis os An ACAP configuration file lacked sufficient input validation, which could allow a path traversal... CVE-2025-5454 6.4 MediumNovember 11, 2025
• axis os An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary... CVE-2025-4645 6.7 MediumNovember 11, 2025
• axis os An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary... CVE-2025-30027 6.7 MediumAugust 12, 2025
• axis os ACAP applications can be executed with elevated privileges, potentially leading to privilege... CVE-2025-3892 6.7 MediumAugust 12, 2025
• axis os During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a... CVE-2025-0358 8.8 HighJune 2, 2025
• axis os, os 2024 +1 more The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower... CVE-2025-0324 Public exploit 9.4 CriticalJune 2, 2025
• axis os, os 2024 +1 more During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered... CVE-2025-0361 4.3 MediumApril 8, 2025
• axis os, os 2022, os 2024 +2 more 51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API... CVE-2024-47261 4.3 MediumApril 8, 2025
• axis os, os 2024 +1 more During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a... CVE-2025-0360 7.8 HighMarch 4, 2025
• axis os, os 2024 +1 more During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a... CVE-2025-0359 8.5 HighMarch 4, 2025
• axis os, os 2024 +1 more Girishunawane, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API... CVE-2024-47259 3.5 LowMarch 4, 2025
• axis os, os 2022, os 2024 +2 more Erik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi... CVE-2024-8160 3.8 LowNovember 26, 2024
• axis os During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the... CVE-2024-7784 6.1 MediumSeptember 10, 2024
• axis os, os 2024 +1 more Amin Aliakbari, member of the AXIS OS Bug Bounty Program, has found a broken access control which... CVE-2024-6979 6.8 MediumSeptember 10, 2024
• axis os, os 2020, os 2022 +2 more Johan Fagerström, member of the AXIS OS Bug Bounty Program, has found that a O3C feature may... CVE-2024-0066 5.3 MediumJune 18, 2024
• axis os, os 2022 +1 more Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip... CVE-2024-0055 6.5 MediumMarch 19, 2024
• axis os, os 2020, os 2022 +2 more Insufficient input validation in VAPIX API create_overlay.cgi CVE-2023-5800 5.4 MediumFebruary 5, 2024
• axis os, os 2022 +1 more During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the... CVE-2023-5553 7.6 HighNovember 21, 2023
• axis os, os 2018, os 2020 +1 more +3 more Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup... CVE-2023-21418 7.1 HighNovember 21, 2023
• axis os, os 2020, os 2022 +2 more Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API... CVE-2023-21417 7.1 HighNovember 21, 2023
• axis os, os 2022 +1 more Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API... CVE-2023-21416 7.1 HighNovember 21, 2023
• axis os, os 2016, os 2018 +2 more +4 more Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del... CVE-2023-21415 6.5 MediumOctober 16, 2023
• axis os, a8207-ve mk ii, q3527-lve +2 more NCC Group has found a flaw during the annual internal penetration test ordered by Axis... CVE-2023-21414 7.1 HighOctober 16, 2023
• axis os Remote code execution vulnerability during the installation of ACAP applications on the Axis device CVE-2023-21413 9.1 CriticalOctober 16, 2023
• axis os, a1001 firmware, a1210 \(-b\) firmware +8 more +10 more Denial-of-Service vulnerability in Axis Network Door Controller's and Axis Network Intercom's OSDP communication CVE-2023-21405 6.5 MediumJuly 25, 2023
• axis os AXIS OS 11.0.X - 11.3.x use a static RSA key in legacy LUA-components to protect Axis-specific... CVE-2023-21404 5.3 MediumMay 8, 2023
• axis os, os 2016, os 2018 +1 more +3 more A user controlled parameter related to SMTP test functionality is not correctly validated making... CVE-2021-31988 8.8 HighOctober 5, 2021
• axis os, os 2016, os 2018 +1 more +3 more A user controlled parameter related to SMTP test functionality is not correctly validated making... CVE-2021-31987 7.5 HighOctober 5, 2021
• axis os, os 2016, os 2018 +1 more +3 more User controlled parameters related to SMTP notifications are not correctly validated. This can... CVE-2021-31986 6.8 MediumOctober 5, 2021