Axis

Latest CVEs · RSS

• CVE-2026-4757 2026-08-11 · CVSS 7.2
  A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be explo
• CVE-2026-6505 2026-08-11 · CVSS 5.1
  The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation. This vulnerability can
• CVE-2026-5304 2026-08-11 · CVSS 5.7
  An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis de
• CVE-2026-5303 2026-08-11 · CVSS 5.7
  The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation. This vulnerability can
• CVE-2026-8158 2026-08-11 · CVSS 5.3
  The Signed Video Framework contained a  buffer overflow issue which could lead the application using this framework to crash. The issue exclusively affects the
• CVE-2026-6181 2026-08-11 · CVSS 5.9
  The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after authenticating with a viewer-privileged
• CVE-2026-1185 2026-05-12 · CVSS 5.4
  A configuration file on the local file system had improper input validation which could allow code execution and potentially lead to privilege escalation. This
• CVE-2026-0804 2026-05-12 · CVSS 6.7
  An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnera
• CVE-2026-0802 2026-05-12 · CVSS 6.0
  An ACAP configuration file lacked sufficient input validation, which could allow command injection and potentially lead to privilege escalation. This vulnerabil
• CVE-2026-0541 2026-05-12 · CVSS 6.7
  ACAP applications can gain elevated privileges due to improper input validation during the installation process, potentially leading to privilege escalation. Th
• CVE-2025-12063 2026-02-10 · CVSS 5.7
  An insecure direct object reference allowed a non-admin user to modify or remove certain data objects without having the appropriate permissions.
• CVE-2025-12757 2026-02-10 · CVSS 4.6
  An AXIS Camera Station Pro feature can be exploited in a way that allows a non-admin user to view information they are not permitted to.
• CVE-2025-13064 2026-02-10 · CVSS 4.5
  A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script which is executed by the server. This att
• CVE-2025-11547 2026-02-10 · CVSS 7.8
  AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server as a non-admin user.
• CVE-2025-11142 2026-02-10 · CVSS 7.1
  The VAPIX API mediaclip.cgi that did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be exploited after
• CVE-2025-9055 2025-11-11 · CVSS 6.4
  The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator-privileged user to gain Linux Root privileges. This flaw can only
• CVE-2025-8998 2025-11-11 · CVSS 3.1
  It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and impact usability. This flaw can only be e
• CVE-2025-9524 2025-11-11 · CVSS 4.3
  The VAPIX API port.cgi did not have sufficient input validation, which may result in process crashes and impact usability. This vulnerability can only be exploi
• CVE-2025-10714 2025-11-11 · CVSS 8.4
  AXIS Optimizer was vulnerable to an unquoted search path vulnerability, which could potentially lead to privilege escalation within Microsoft Windows operating
• CVE-2025-8108 2025-11-11 · CVSS 6.7
  An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privilege escalation. This vulnerability can onl
• CVE-2025-6779 2025-11-11 · CVSS 6.7
  An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privilege escalation. This vulnerability can on
• CVE-2025-6571 2025-11-11 · CVSS 6.0
  A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it.
• CVE-2025-5452 2025-11-11 · CVSS 6.6
  A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to potential privilege esc
• CVE-2025-6298 2025-11-11 · CVSS 6.7
  ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege escalation. This vulnerability can only be exp
• CVE-2025-5718 2025-11-11 · CVSS 6.8
  The ACAP Application framework could allow privilege escalation through a symlink attack. This vulnerability can only be exploited if the Axis device is configu