CVE-2026-12963 PUBLISHED

Assigner: Axis
Reserved: 23.06.2026 Published: 10.11.2026 Updated: 10.11.2026

A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on the server.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
CVSS Score: 7.4

Product Status

Vendor Axis Communications AB
Product AXIS Camera Station Pro
Versions Default: unaffected
  • affected from 6.0 to 6.18 (excl.)
Vendor Axis Communications AB
Product AXIS Camera Station 5
Versions Default: unaffected
  • affected from 5.0 to 5.59 (excl.)

Credits

  • Viet Anh Trinh Thang finder
  • Le Duc Anh Vu finder

References

Problem Types

  • CWE-732: Incorrect Permission Assignment for Critical Resource CWE