Summary
Ein Angreifer kann mehrere Schwachstellen in Axis Camera Station und Camera Station Pro ausnutzen, um Phishing-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, Berechtigungen zu erweitern, Administratorrechte zu erlangen, beliebigen Code auszuführen, Daten zu manipulieren oder offenzulegen oder nicht näher spezifizierte Auswirkungen zu verursachen, was zu einer vollständigen Kompromittierung des Systems führen kann.
Product
Axis Camera Station ist eine Videoüberwachungssoftware zur Aufzeichnung und Verwaltung von Videostreams von Netzwerkkameras.
Vulnerabilities 9
-
Critical 9.9
A vulnerability that could allow an attacker to compromise a system.
-
High 8.8
A vulnerability to perform a privilege escalation attack on the server as a non-admin user.
-
High 8.8
A vulnerability that could allow an attacker to gain unauthorized access.
-
High 8.4
A vulnerability that could lead to a high privileged authenticated user performing a remote code execution attack.
-
High 8.0
A vulnerability allowing for privileged escalation of the viewer account to gain administrator privileges.
-
High 7.4
A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on th…
-
High 7.1CVE-2026-63286 Public exploit
Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are st…
-
Medium 6.5
It was possible for an authenticated non-admin user to modify certain data objects without having the appropriate permi…
-
Low 3.5
A vulnerability related to URL redirection handling during the sign-out flow that could allow a user to be redirected t…
Revision history
-
#1
Initiale Fassung
References
-
AXIS Security advisories vom 2026-11-10
https://help.axis.com/en-us/security-advisories
-
AXIS Security advisories vom 2026-11-10
https://www.axis.com/dam/public/bc/65/61/cve-2026-63287pdf-en-US-561253.pdf
-
AXIS Security advisories vom 2026-11-10
https://www.axis.com/dam/public/c9/5c/29/cve-2026-63286pdf-en-US-560650.pdf
-
AXIS Security advisories vom 2026-11-10
https://www.axis.com/dam/public/d7/64/a2/cve-2026-13387pdf-en-US-561252.pdf
-
AXIS Security advisories vom 2026-11-10
https://www.axis.com/dam/public/e4/2d/85/cve-2026-13312pdf-en-US-561251.pdf
-
AXIS Security advisories vom 2026-11-10
https://www.axis.com/dam/public/50/3b/39/cve-2026-12964pdf-en-US-561250.pdf
-
AXIS Security advisories vom 2026-11-10
https://www.axis.com/dam/public/c5/ba/15/cve-2026-12963pdf-en-US-561249.pdf
-
AXIS Security advisories vom 2026-11-10
https://www.axis.com/dam/public/1a/bd/41/cve-2026-12389pdf-en-US-561248.pdf
-
AXIS Security advisories vom 2026-11-10
https://www.axis.com/dam/public/09/58/fa/cve-2026-8372pdf-en-US-561247.pdf
-
AXIS Security advisories vom 2026-11-10
https://www.axis.com/dam/public/1f/4b/66/cve-2026-4762pdf-en-US-561246.pdf