Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-63287 EUVD-2026-120810GHSA-vh6p-pfff-g2h6

It was possible for an authenticated non-admin user to modify certain data objects without having the appropriate permissions, which could …

Published Nov 10, 2026 · Updated Nov 12, 2026 · Assigned by Axis

Description

It was possible for an authenticated non-admin user to modify certain data objects without having the appropriate permissions, which could be used to tamper with audit log creation in AXIS Camera Station.

Affected products

VendorProductAffectedFixed
Axis Communications AB AXIS Camera Station Pro 6.0 – < 6.18 6.18
Axis Communications AB AXIS Camera Station 5 5.0 – < 5.59 5.59

Advisories 1

References