Vendor
Axis Communications AB
100 known vulnerabilities.
Products
27 results · Clear filters · Feed
-
High 8.0
A vulnerability allowing for privileged escalation of the viewer account to gain administrator privileges.
-
High 7.4
A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on th…
-
High 8.4
A vulnerability that could lead to a high privileged authenticated user performing a remote code execution attack.
-
High 8.8
A vulnerability that could allow an attacker to gain unauthorized access.
-
High 8.8
A vulnerability to perform a privilege escalation attack on the server as a non-admin user.
-
High 8.3
A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint. This bypasse…
-
High 7.1CVE-2026-63286 Public exploit
Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are st…
-
High 7.2
A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privileg…
-
High 7.8
AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server as a non-admin user.
-
High 7.1CVE-2025-11142 Public exploit
The VAPIX API mediaclip.cgi that did not have a sufficient input validation allowing for a possible remote code executi…
-
High 8.4
AXIS Optimizer was vulnerable to an unquoted search path vulnerability, which could potentially lead to privilege escal…
-
High 8.8
During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Dev…
-
High 7.8
During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Dev…
-
High 8.5
During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the ACAP Appl…
-
High 7.5
Florent Thiéry has found that selected Axis devices were vulnerable to handling certain ethernet frames which could lea…
-
High 7.6
During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device …
-
High 7.1
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to pa…
-
High 7.1
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API manageoverlayimage.cgi was vulnera…
-
High 7.1
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi was vulnerable …
-
High 7.1
NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. The protection f…
-
High 7.2
Non-sanitized user input could lead to SQL injections in AXIS License Plate Verifier
User provided input is not sanitized on the AXIS License Plate Verifier specific “search.cgi” allowing for SQL injections.
-
High 7.2
Non-sanitized user input could lead to arbitrary code execution during Access Control configuration in AXIS License Plate Verifier
User provided input is not sanitized in the “Settings > Access Control” configuration interface allowing for arbitrary code execution.
-
High 7.2
Non-sanitized user input could lead to arbitrary code execution in AXIS License Plate Verifier
User provided input is not sanitized on the AXIS License Plate Verifier specific “api.cgi” allowing for arbitrary code execution.
-
High 8.4
Insufficient file permissions leak administrator-privileged credentials in AXIS License Verifier ACAP
Due to insufficient file permissions, unprivileged users could gain access to unencrypted administrator credentials allowing the configuration of the application.
-
High 8.4
Insufficient file permissions leak user credentials of 3rd party integration interfaces in AXIS License Verifier ACAP
Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials that are used in the integration interface towards 3rd party systems.
-
High 8.8
Privilege escalation in AXIS License Plate Verifier ACAP
A broken access control was found allowing for privileged escalation of the operator account to gain administrator privileges.
-
High 7.1
Heap-based buffer overflow in Axis A1001 Network Door Controller's OSDP communication
Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which is handling the OSDP communication allowing to write outside of the allocated buffer. …