Database Backup Vulnerability in AXIS Camera Station Pro by AXIS Communications
CVE-2026-63286

7.1HIGH

What is CVE-2026-63286?

Database backups in AXIS Camera Station Pro are susceptible to offline attacks, potentially compromising sensitive data. Backups created from versions prior to the recent update remain at risk, as the software automatically generates additional backup copies during updates. It is crucial for users to delete all existing backups and update credentials stored within AXIS Camera Station Pro to mitigate the risk of unauthorized access.

Affected Version(s)

AXIS Camera Station 5 5.00

AXIS Camera Station Pro 6.0 < 6.20

References

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Maciej 'mace' Nowak
.