Skip to content
OpenAdvisories
Medium · 6.4 CVE-2025-9055 EUVD-2025-74036GHSA-rfx4-qxj5-wp67

The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator-privileged user to gain Linux Root privilege…

Published Nov 11, 2025 · Updated Feb 26, 2026 · Assigned by Axis

Description

The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator-privileged user to gain Linux Root privileges. This flaw can only be exploited after authenticating with an administrator-privileged service account.

Affected products

VendorProductAffectedFixed
Axis Communications AB AXIS OS 12.0.0 – < 12.7.31 12.7.31

Advisories 1

References