Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-63282 EUVD-2026-120773GHSA-xpcc-633m-7gcq

Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which could lead to privilege …

Published Nov 10, 2026 · Updated Nov 12, 2026 · Assigned by Axis

Vendor: Axis Communications AB Product: AXIS OS

Description

Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which could lead to privilege escalation.

Affected products

VendorProductAffectedFixed
Axis Communications AB AXIS OS 13.0.0 – < 13.0.84, 12.0.0 – < 12.11.123, 11.0.0 – < 11.11.231, 10.0.0 – < 10.12.354, 9.0.0 – < 9.80.153, 7.0.0 – < 8.40.112, 6.0.0 – < 6.50.5.23 13.0.84

Advisories 1

References