Axis Communications AB vulnerabilities
100 CVEs and advisories name Axis Communications AB as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-63287It was possible for an authenticated non-admin user to modify certain data objects without having the appropriate permissions, which could…
- CVE-2026-13387A vulnerability related to URL redirection handling during the sign-out flow that could allow a user to be redirected to unintended…
- CVE-2026-13312A vulnerability that could allow an attacker to compromise a system.
- CVE-2026-12964A vulnerability allowing for privileged escalation of the viewer account to gain administrator privileges.
- CVE-2026-12963A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on the server.
- CVE-2026-12389A vulnerability that could lead to a high privileged authenticated user performing a remote code execution attack.
- CVE-2026-8372A vulnerability that could allow an attacker to gain unauthorized access.
- CVE-2026-4762A vulnerability to perform a privilege escalation attack on the server as a non-admin user.
- CVE-2026-63288A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint.
- CVE-2026-14918The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the application using this…
- CVE-2026-63282Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which could lead to privilege…
- CVE-2026-14543The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting unauthorized access…
- CVE-2026-14542The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalation.
- CVE-2026-13409The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality.
- CVE-2026-9063A locally authenticated user can achieve privilege escalation via an insecure configuration that leads to unauthorized code execution.
- CVE-2026-63286Database backups are vulnerable to offline attacks.
- CVE-2026-4757A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation.
- CVE-2026-6505The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation.
- CVE-2026-5304An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation.
- CVE-2026-5303The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation.
- CVE-2026-8158The Signed Video Framework contained a buffer overflow issue which could lead the application using this framework to crash.
- CVE-2026-6181The Device Configuration Framework is vulnerable to an authentication bypass flaw.
- CVE-2026-1185A configuration file on the local file system had improper input validation which could allow code execution and potentially lead to privile
- CVE-2026-0804An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege esca
- CVE-2026-0802An ACAP configuration file lacked sufficient input validation, which could allow command injection and potentially lead to privilege escalat
- CVE-2026-0541ACAP applications can gain elevated privileges due to improper input validation during the installation process, potentially leading to priv
- CVE-2025-12063An insecure direct object reference allowed a non-admin user to modify or remove certain data objects without having the appropriate permiss
- CVE-2025-12757An AXIS Camera Station Pro feature can be exploited in a way that allows a non-admin user to view information they are not permitted to.
- CVE-2025-13064A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script which is executed by
- CVE-2025-11547AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server as a non-admin user.