CVE-2026-12389 PUBLISHED

Assigner: Axis
Reserved: 16.06.2026 Published: 10.11.2026 Updated: 10.11.2026

A vulnerability that could lead to a high privileged authenticated user performing a remote code execution attack.

Metrics

CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS Score: 8.4

Product Status

Vendor Axis Communications AB
Product AXIS Camera Station Pro
Versions Default: unaffected
  • affected from 5.0 to 5.59 (excl.)
Vendor Axis Communications AB
Product AXIS Camera Station Pro
Versions Default: unaffected
  • affected from 6.0 to 6.18 (excl.)

Credits

  • Mateusz Mieczkowski (Rexnets) finder

References

Problem Types

  • CWE-502: Deserialization of Untrusted Data CWE