Unauthorized Access Vulnerability in Axis Network Attached Storage Devices
CVE-2026-12963

7.4HIGH

What is CVE-2026-12963?

An issue has been identified in Axis Network Attached Storage devices, which allows an account with viewer permissions to gain unauthorized access to sensitive network resources. This vulnerability poses a significant risk to the integrity and privacy of stored data, as it may enable malicious actors to exploit these inadequate access controls effectively. Users of these products are encouraged to apply the latest security patches to mitigate the threat.

Affected Version(s)

AXIS Camera Station 5 5.0 < 5.59

AXIS Camera Station Pro 6.0 < 6.18

References

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Viet Anh Trinh Thang
Le Duc Anh Vu
.