URL Redirection Vulnerability in Axis Network Video Products
CVE-2026-13387

3.5LOW

Key Information:

Vendor

Axis Communications Ab

Status
Axis Camera Station Pro
Vendor
CVE Published:
10 November 2026

What is CVE-2026-13387?

This vulnerability involves improper handling of URL redirection during the sign-out process, which may allow a user to be inadvertently redirected to unauthorized external sites. This can occur under specific conditions, posing a risk of exposure to potential phishing attacks or other malicious content.

Affected Version(s)

AXIS Camera Station Pro 6.0 < 6.18

References

https://www.axis.com/dam/public/d7/64/a2/cve-2026-13387pd...

CVSS V3.1

Score:
3.5
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Michael Minchinton (Griffinton)
.