AC
Vendor
Axis Communications AB
99
CVEs
0
On KEV
2
New 30D
Products
AC9.8
AXIS Camera Station Pro
Axis Communications AB
15 CVEs0 on KEV1 new
AC7.1
AXIS Camera Station 5
Axis Communications AB
1 CVEs0 on KEV1 new
AO8.8
AXIS OS
Axis Communications AB
52 CVEs0 on KEV0 new
AC9.8
AXIS Camera Station
Axis Communications AB
7 CVEs0 on KEV0 new
AL9.8
AXIS License Plate Verifier
Axis Communications AB
6 CVEs0 on KEV0 new
AD9.0
AXIS Device Manager
Axis Communications AB
3 CVEs0 on KEV0 new
AA8.8
AXIS A1001 Network Door Controller
Axis Communications AB
2 CVEs0 on KEV0 new
AA6.5
AXIS A1210-B Network Door Controller
Axis Communications AB
1 CVEs0 on KEV0 new
AA6.5
AXIS A1601 Network Door Controller
Axis Communications AB
1 CVEs0 on KEV0 new
AA6.5
AXIS A1610 (-B) Network Door Controller
Axis Communications AB
1 CVEs0 on KEV0 new
AA6.8
AXIS A8207-VE Mk II
Axis Communications AB
1 CVEs0 on KEV0 new
AA6.5
AXIS A8207-VE Mk II Network Video Door Station
Axis Communications AB
1 CVEs0 on KEV0 new
AA6.5
AXIS A8207-VE Network Video Door Station
Axis Communications AB
1 CVEs0 on KEV0 new
AF5.3
Axis File Player
Axis Communications AB
1 CVEs0 on KEV0 new
AO8.4
AXIS Optimizer
Axis Communications AB
1 CVEs0 on KEV0 new
AP7.5
AXIS P1428-E Network Camera
Axis Communications AB
1 CVEs0 on KEV0 new
AQ6.8
AXIS Q3527-LVE
Axis Communications AB
1 CVEs0 on KEV0 new
AQ7.5
AXIS Q6128-E PTZ Network Camera
Axis Communications AB
1 CVEs0 on KEV0 new
SM5.3
Signed media verifier
Axis Communications AB
1 CVEs0 on KEV0 new
SV5.3
Signed Video Framework
Axis Communications AB
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-63286 New | AC AXIS Camera Station Pro Axis Communications AB | 7.1 | Oct 28 | Database backups are vulnerable to offline attacks |
| CVE-2026-4757 | AO AXIS OS Axis Communications AB | 7.2 | Aug 11 | A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation |
| CVE-2026-6505 | AO AXIS OS Axis Communications AB | 5.1 | Aug 11 | The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation |
| CVE-2026-5304 | AO AXIS OS Axis Communications AB | 5.7 | Aug 11 | An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation |
| CVE-2026-5303 | AO AXIS OS Axis Communications AB | 5.7 | Aug 11 | The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation |
| CVE-2026-8158 | SV Signed Video Framework Axis Communications AB | 5.3 | Aug 11 | The Signed Video Framework contained a buffer overflow issue which could lead the application using this framework to crash |
| CVE-2026-6181 | AO AXIS OS Axis Communications AB | 5.9 | Aug 11 | The Device Configuration Framework is vulnerable to an authentication bypass flaw |
| CVE-2026-1185 | AO AXIS OS Axis Communications AB | 8.8 | May 12 | A configuration file on the local file system had improper input validation which could allow code execution and potentially lead to privilege escalation |
| CVE-2026-0804 | AO AXIS OS Axis Communications AB | 7.3 | May 12 | An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation |
| CVE-2026-0802 | AO AXIS OS Axis Communications AB | 7.3 | May 12 | An ACAP configuration file lacked sufficient input validation, which could allow command injection and potentially lead to privilege escalation |
| CVE-2026-0541 | AO AXIS OS Axis Communications AB | 7.3 | May 12 | ACAP applications can gain elevated privileges due to improper input validation during the installation process, potentially leading to privilege escalation |
| CVE-2025-12063 | AC AXIS Camera Station Pro Axis Communications AB | 5.7 | Feb 10 | An insecure direct object reference allowed a non-admin user to modify or remove certain data objects without having the appropriate permissions |
| CVE-2025-12757 | AC AXIS Camera Station Pro Axis Communications AB | 4.6 | Feb 10 | An AXIS Camera Station Pro feature can be exploited in a way that allows a non-admin user to view information they are not permitted to |
| CVE-2025-13064 | AC AXIS Camera Station Pro Axis Communications AB | 4.5 | Feb 10 | A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script which is executed by the server |
| CVE-2025-11547 | AC AXIS Camera Station Pro Axis Communications AB | 7.8 | Feb 10 | AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server as a non-admin user |
| CVE-2025-11142 | AO AXIS OS Axis Communications AB | 8.8 | Feb 10 | The VAPIX API mediaclip.cgi that did not have a sufficient input validation allowing for a possible remote code execution |
| CVE-2025-9055 | AO AXIS OS Axis Communications AB | 6.4 | Nov 11 | The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator-privileged user to gain Linux Root privileges |
| CVE-2025-8998 | AO AXIS OS Axis Communications AB | 3.1 | Nov 11 | It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and impact usability |
| CVE-2025-9524 | AO AXIS OS Axis Communications AB | 4.3 | Nov 11 | The VAPIX API port.cgi did not have sufficient input validation, which may result in process crashes and impact usability |
| CVE-2025-10714 | AO AXIS Optimizer Axis Communications AB | 8.4 | Nov 11 | AXIS Optimizer was vulnerable to an unquoted search path vulnerability, which could potentially lead to privilege escalation within Microsoft Windows operating system |
| CVE-2025-8108 | AO AXIS OS Axis Communications AB | 6.7 | Nov 11 | An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privilege escalation |
| CVE-2025-6779 | AO AXIS OS Axis Communications AB | 6.7 | Nov 11 | An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privilege escalation |
| CVE-2025-6571 | AO AXIS OS Axis Communications AB | 6.0 | Nov 11 | A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it |
| CVE-2025-5452 | AO AXIS OS Axis Communications AB | 6.6 | Nov 11 | A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to potential privilege escalation of the… |
| CVE-2025-6298 | AO AXIS OS Axis Communications AB | 6.7 | Nov 11 | ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege escalation |
| CVE-2025-5718 | AO AXIS OS Axis Communications AB | 6.8 | Nov 11 | The ACAP Application framework could allow privilege escalation through a symlink attack |
| CVE-2025-5454 | AO AXIS OS Axis Communications AB | 6.7 | Nov 11 | An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation |
| CVE-2025-4645 | AO AXIS OS Axis Communications AB | 6.7 | Nov 11 | An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution |
| CVE-2025-30027 | AO AXIS OS Axis Communications AB | 6.7 | Aug 12 | An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution |
| CVE-2025-3892 | AO AXIS OS Axis Communications AB | 6.7 | Aug 12 | ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation |
| CVE-2025-7622 | AC AXIS Camera Station Axis Communications AB | 5.7 | Aug 12 | During an internal security assessment, a Server-Side Request Forgery (SSRF) vulnerability that allowed an authenticated attacker to access internal resources on the server was… |
| CVE-2025-30026 | AC AXIS Camera Station Axis Communications AB | 9.8 | Jul 11 | The AXIS Camera Station Server had a flaw that allowed to bypass authentication that is normally required |
| CVE-2025-30025 | AD AXIS Device Manager Axis Communications AB | 7.8 | Jul 11 | The communication protocol used between the server process and the service control had a flaw that could lead to a local privilege escalation |
| CVE-2025-30024 | AD AXIS Device Manager Axis Communications AB | 6.8 | Jul 11 | The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack |
| CVE-2025-30023 | AC AXIS Camera Station Axis Communications AB | 9.0 | Jul 11 | The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack |
| CVE-2025-0358 | AO AXIS OS Axis Communications AB | 8.8 | Jun 2 | During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed a privilege… |
| CVE-2025-0325 | AO AXIS OS Axis Communications AB | 4.3 | Jun 2 | A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour configuration page in… |
| CVE-2025-0324 | AO AXIS OS Axis Communications AB | 8.8 | Jun 2 | The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges |
| CVE-2025-0926 | AC AXIS Camera Station Pro Axis Communications AB | 7.3 | Apr 23 | Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for a non-admin user to remove system files causing a boot loop by redirecting a… |
| CVE-2025-1056 | AC AXIS Camera Station Pro Axis Communications AB | 6.5 | Apr 23 | Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a specific file that the server is using |
| CVE-2025-0361 | AO AXIS OS Axis Communications AB | 5.3 | Apr 8 | During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed for… |
| CVE-2024-47261 | AO AXIS OS Axis Communications AB | 4.3 | Apr 8 | 51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did not have sufficient input validation to allow an attacker to upload… |
| CVE-2025-0360 | AO AXIS OS Axis Communications AB | 7.8 | Mar 4 | During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that could lead to an incorrect… |
| CVE-2025-0359 | AO AXIS OS Axis Communications AB | 5.5 | Mar 4 | During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the ACAP Application framework that allowed applications to access… |
| CVE-2024-47262 | AO AXIS OS Axis Communications AB | 5.3 | Mar 4 | Dzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API param.cgi was vulnerable to a race condition attack allowing for an attacker to block… |
| CVE-2024-47260 | AO AXIS OS Axis Communications AB | 6.5 | Mar 4 | 51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API mediaclip.cgi did not have a sufficient input validation allowing for uploading more audio clips… |
| CVE-2024-47259 | AO AXIS OS Axis Communications AB | 7.1 | Mar 4 | Girishunawane, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi did not have a sufficient input validation allowing for a possible command… |
| CVE-2024-7696 | AC AXIS Camera Station Pro Axis Communications AB | 6.3 | Jan 7 | Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for an authenticated malicious client to tamper with audit log creation in AXIS… |
| CVE-2024-8160 | AO AXIS OS Axis Communications AB | 2.7 | Nov 26 | Erik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi did not have a sufficient input validation allowing for a possible command… |
| CVE-2024-8772 | AO AXIS OS Axis Communications AB | 4.3 | Nov 26 | 51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API managedoverlayimages.cgi was vulnerable to a race condition attack allowing for an attacker to… |
| CVE-2024-47257 | AP AXIS P1428-E Network Camera Axis Communications AB | 7.5 | Nov 26 | Florent Thiéry has found that selected Axis devices were vulnerable to handling certain ethernet frames which could lead to the Axis device becoming unavailable in the network |
| CVE-2024-6831 | AC AXIS Camera Station Axis Communications AB | 4.4 | Nov 26 | Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program has found that it is possible to edit and/or remove views without the necessary permission due to a… |
| CVE-2024-6749 | AC AXIS Camera Station Pro Axis Communications AB | 6.3 | Nov 26 | Seth Fogie, member of the AXIS Camera Station Pro Bug Bounty Program, has found that the Incident report feature may expose sensitive credentials on the AXIS Camera Station… |
| CVE-2024-6476 | AC AXIS Camera Station Axis Communications AB | 4.2 | Nov 26 | Gee-netics, member of the AXIS Camera Station Pro Bug Bounty Program has found that it is possible for a non-admin user to gain system privileges by redirecting a file deletion… |
| CVE-2024-7784 | AO AXIS OS Axis Communications AB | 6.1 | Sep 10 | During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device tampering (commonly known as Secure Boot) in AXIS OS making… |
| CVE-2024-6979 | AO AXIS OS Axis Communications AB | 7.5 | Sep 10 | Amin Aliakbari, member of the AXIS OS Bug Bounty Program, has found a broken access control which would lead to less-privileged operator- and/or viewer accounts having more… |
| CVE-2024-6173 | AO AXIS OS Axis Communications AB | 6.5 | Sep 10 | 51l3nc3, member of the AXIS OS Bug Bounty Program, has found that a Guard Tour VAPIX API parameter allowed the use of arbitrary values allowing for an attacker to block access to… |
| CVE-2024-6509 | AO AXIS OS Axis Communications AB | 6.5 | Sep 10 | Marinus Pfund, member of the AXIS OS Bug Bounty Program, has found the VAPIX API alwaysmulti.cgi was vulnerable for file globbing which could lead to resource exhaustion of the… |
| CVE-2024-0067 | AO AXIS OS Axis Communications AB | 4.3 | Sep 10 | Marinus Pfund, member of the AXIS OS Bug Bounty Program, has found the VAPIX API ledlimit.cgi was vulnerable for path traversal attacks allowing to list folder/file names on the… |
| CVE-2024-0066 | AO AXIS OS Axis Communications AB | 5.3 | Jun 18 | Johan Fagerström, member of the AXIS OS Bug Bounty Program, has found that a O3C feature may expose sensitive traffic between the client (Axis device) and (O3C) server |