Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-9524 EUVD-2025-74035GHSA-3ghv-qqmp-p6c4

The VAPIX API port.cgi did not have sufficient input validation, which may result in process crashes and impact usability. This vulnerabili…

Published Nov 11, 2025 · Updated Nov 14, 2025 · Assigned by Axis

Vendor: Axis Communications AB Product: AXIS OS

Description

The VAPIX API port.cgi did not have sufficient input validation, which may result in process crashes and impact usability. This vulnerability can only be exploited after authenticating with a viewer- operator- or administrator-privileged service account.

Affected products

VendorProductAffectedFixed
Axis Communications AB AXIS OS 6.50.0 – < 6.50.5.21, 7.0.0 – < 8.40.89, 9.0.0 – < 9.80.123, 10.0.0 – < 10.12.305, 11.0.0 – < 11.11.177, 12.0.0 – < 12.7.11 6.50.5.21

Advisories 1

References