AC
Vendor
Axis Communications AB
20
CVEs
0
On KEV
2
New 30D
Products
AC7.1
AXIS Camera Station Pro
Axis Communications AB
2 CVEs0 on KEV1 new
AC7.1
AXIS Camera Station 5
Axis Communications AB
1 CVEs0 on KEV1 new
AO8.8
AXIS OS
Axis Communications AB
14 CVEs0 on KEV0 new
AF5.3
Axis File Player
Axis Communications AB
1 CVEs0 on KEV0 new
SM5.3
Signed media verifier
Axis Communications AB
1 CVEs0 on KEV0 new
SV5.3
Signed Video Framework
Axis Communications AB
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-63286 New | AC AXIS Camera Station 5 Axis Communications AB | 7.1 | Oct 28 | Database backups are vulnerable to offline attacks |
| CVE-2026-4757 | AO AXIS OS Axis Communications AB | 7.2 | Aug 11 | A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation |
| CVE-2026-6505 | AO AXIS OS Axis Communications AB | 5.1 | Aug 11 | The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation |
| CVE-2026-5304 | AO AXIS OS Axis Communications AB | 5.7 | Aug 11 | An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation |
| CVE-2026-5303 | AO AXIS OS Axis Communications AB | 5.7 | Aug 11 | The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation |
| CVE-2026-8158 | SV Signed Video Framework Axis Communications AB | 5.3 | Aug 11 | The Signed Video Framework contained a buffer overflow issue which could lead the application using this framework to crash |
| CVE-2026-6181 | AO AXIS OS Axis Communications AB | 5.9 | Aug 11 | The Device Configuration Framework is vulnerable to an authentication bypass flaw |
| CVE-2026-1185 | AO AXIS OS Axis Communications AB | 8.8 | May 12 | A configuration file on the local file system had improper input validation which could allow code execution and potentially lead to privilege escalation |
| CVE-2026-0804 | AO AXIS OS Axis Communications AB | 7.3 | May 12 | An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation |
| CVE-2026-0802 | AO AXIS OS Axis Communications AB | 7.3 | May 12 | An ACAP configuration file lacked sufficient input validation, which could allow command injection and potentially lead to privilege escalation |
| CVE-2026-0541 | AO AXIS OS Axis Communications AB | 7.3 | May 12 | ACAP applications can gain elevated privileges due to improper input validation during the installation process, potentially leading to privilege escalation |
| CVE-2024-7696 | AC AXIS Camera Station Pro Axis Communications AB | 6.3 | Jan 7 | Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for an authenticated malicious client to tamper with audit log creation in AXIS… |
| CVE-2024-7784 | AO AXIS OS Axis Communications AB | 6.1 | Sep 10 | During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device tampering (commonly known as Secure Boot) in AXIS OS making… |
| CVE-2024-6979 | AO AXIS OS Axis Communications AB | 7.5 | Sep 10 | Amin Aliakbari, member of the AXIS OS Bug Bounty Program, has found a broken access control which would lead to less-privileged operator- and/or viewer accounts having more… |
| CVE-2024-6173 | AO AXIS OS Axis Communications AB | 6.5 | Sep 10 | 51l3nc3, member of the AXIS OS Bug Bounty Program, has found that a Guard Tour VAPIX API parameter allowed the use of arbitrary values allowing for an attacker to block access to… |
| CVE-2024-6509 | AO AXIS OS Axis Communications AB | 6.5 | Sep 10 | Marinus Pfund, member of the AXIS OS Bug Bounty Program, has found the VAPIX API alwaysmulti.cgi was vulnerable for file globbing which could lead to resource exhaustion of the… |
| CVE-2024-0067 | AO AXIS OS Axis Communications AB | 4.3 | Sep 10 | Marinus Pfund, member of the AXIS OS Bug Bounty Program, has found the VAPIX API ledlimit.cgi was vulnerable for path traversal attacks allowing to list folder/file names on the… |