Input Validation Flaw in VAPIX API Affects Axis Products

CVE-2025-11142

What is CVE-2025-11142?

This vulnerability in the VAPIX API's mediaclip.cgi component stems from insufficient input validation, potentially leading to remote code execution. This security issue requires authentication with an operator or administrator-level account, which heightens the risk for users with compromised credentials. Organizations using Axis devices with this API should ensure proper access controls and security measures are in place to mitigate potential exploitation.

References