Vendor
Axis Communications AB
100 known vulnerabilities.
Axis Communications AB at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 15 | 1 |
| Oct 2026 | 1 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 6 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 4 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 5 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 12 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 3 | 0 |
| Jul 2025 | 4 | 1 |
| Jun 2025 | 3 | 1 |
| May 2025 | 0 | 0 |
| Apr 2025 | 4 | 0 |
| Mar 2025 | 5 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 1 | 0 |
| Dec 2024 | 0 | 0 |
Products
AXIS OS 61
AXIS Camera Station Pro 23
AXIS Camera Station 7
AXIS License Plate Verifier 6
AXIS Camera Station 5 4
AXIS Device Manager 4
Signed Video Framework 2
Signed media verifier 2
Axis File Player 2
AXIS A1001 Network Door Controller 2
AXIS A1601 - Secure Entry 1
AXIS A1810 - Secure Entry 1
AXIS A1710 1
AXIS A1610 - Secure Entry 1
AXIS A1210 - Secure Entry 1
AXIS IP Utility 1
AXIS Q6128-E PTZ Network Camera 1
AXIS P1428-E Network Camera 1
AXIS Optimizer 1
AXIS A1210-B Network Door Controller 1
AXIS A1601 Network Door Controller 1
AXIS A1610 (-B) Network Door Controller 1
AXIS A8207-VE Network Video Door Station 1
AXIS A8207-VE Mk II Network Video Door Station 1
AXIS A8207-VE Mk II 1
AXIS Q3527-LVE 1
AXIS A1001 0
Latest advisories
-
Critical max 9.0
Axis Communications Camera Station Pro, Camera Station, and Device Manager (Update B)
Successful exploitation of these vulnerabilities could result in an attacker executing arbitrary code, executing a man-in-middle style attack, or bypass authentication.
first Dec 18, 2025 -
High max 7.1ICSA-23-206-01 1 CVE
AXIS A1001
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
100 results · Feed
-
Medium 6.5
It was possible for an authenticated non-admin user to modify certain data objects without having the appropriate permi…
-
Low 3.5
A vulnerability related to URL redirection handling during the sign-out flow that could allow a user to be redirected t…
-
Critical 9.9
A vulnerability that could allow an attacker to compromise a system.
-
High 8.0
A vulnerability allowing for privileged escalation of the viewer account to gain administrator privileges.
-
High 7.4
A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on th…
-
High 8.4
A vulnerability that could lead to a high privileged authenticated user performing a remote code execution attack.
-
High 8.8
A vulnerability that could allow an attacker to gain unauthorized access.
-
High 8.8
A vulnerability to perform a privilege escalation attack on the server as a non-admin user.
-
High 8.3
A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint. This bypasse…
-
Medium 5.3
The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the appl…
-
Medium 6.5
Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which coul…
-
Low 3.9
The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting …
-
Medium 6.7
The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalatio…
-
Medium 4.3
The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality. This flaw can only …
-
Medium 6.7
A locally authenticated user can achieve privilege escalation via an insecure configuration that leads to unauthorized …
-
High 7.1CVE-2026-63286 Public exploit
Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are st…
-
High 7.2
A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privileg…
-
Medium 5.1
The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to pri…
-
Medium 5.7
An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerabi…
-
Medium 5.7
The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to pri…
-
Medium 5.3
The Signed Video Framework contained a buffer overflow issue which could lead the application using this framework to …
-
Medium 5.9
The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited afte…
-
Medium 5.4
A configuration file on the local file system had improper input validation which could allow code execution and potent…
-
Medium 6.7
An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to pot…
-
Medium 6.0
An ACAP configuration file lacked sufficient input validation, which could allow command injection and potentially lead…
-
Medium 6.7
ACAP applications can gain elevated privileges due to improper input validation during the installation process, potent…
-
Medium 5.7
An insecure direct object reference allowed a non-admin user to modify or remove certain data objects without having th…
-
Medium 4.6
An AXIS Camera Station Pro feature can be exploited in a way that allows a non-admin user to view information they are …
-
Medium 4.5
A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script …
-
High 7.8
AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server as a non-admin user.
-
High 7.1CVE-2025-11142 Public exploit
The VAPIX API mediaclip.cgi that did not have a sufficient input validation allowing for a possible remote code executi…
-
Medium 6.4
The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator-privileged user to gain …
-
Low 3.1
It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and …
-
Medium 4.3
The VAPIX API port.cgi did not have sufficient input validation, which may result in process crashes and impact usabili…
-
High 8.4
AXIS Optimizer was vulnerable to an unquoted search path vulnerability, which could potentially lead to privilege escal…
-
Medium 6.7
An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privile…
-
Medium 6.7
An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privil…
-
Medium 6.0
A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it.
-
Medium 6.6
A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applica…
-
Medium 6.7
ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege escal…