Unauthorized Access Vulnerability in Axis Communications Products
CVE-2026-63288

8.3HIGH

Key Information:

Vendor

Axis Communications Ab

Status
Axis A1210 - Secure Entry
Axis A1601 - Secure Entry
Axis A1610 - Secure Entry
Axis A1710
Vendor
CVE Published:
10 November 2026

What is CVE-2026-63288?

A vulnerability has been identified where a malformed WebSocket request can gain unauthorized access to restricted API endpoints within Axis Communications products. This bypasses the security mechanisms put in place for authentication, potentially exposing sensitive data or allowing unauthorized actions. Proper security measures and updates should be applied to mitigate the risks associated with this vulnerability.

Affected Version(s)

AXIS A1210 - Secure Entry 11.7.12.2 < 12.11.106.1

AXIS A1601 - Secure Entry 11.1.10.1 < 12.11.106.1

AXIS A1610 - Secure Entry 11.4.32.2 < 12.11.106.1

References

https://www.axis.com/dam/public/fa/79/f5/cve-2026-63288pd...

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Alardiians
.