Privilege Escalation Vulnerability in Axis Product by Axis Communications
CVE-2026-12964

8HIGH

Key Information:

Vendor

Axis Communications Ab

Status
Axis Camera Station Pro
Vendor
CVE Published:
10 November 2026

What is CVE-2026-12964?

A security flaw that permits unauthorized elevation of privileges for viewer accounts, potentially allowing malicious actors to gain administrator access in affected Axis products. This vulnerability poses significant risks as it could lead to unauthorized modifications and data breaches.

Affected Version(s)

AXIS Camera Station Pro 6.6 < 6.18

References

https://www.axis.com/dam/public/50/3b/39/cve-2026-12964pd...

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ishan Vyas
.