[ CVE-2026-63286 · Published 28 Oct 2026 ]
Vulnerability in Axis Communications AB AXIS Camera Station Pro
CVSS 7.1
EPSS <1%2 agency advisoriesFix available
[ Description ]Official description
Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are still vulnerable. AXIS Camera Station Pro automatically creates one more such backup for recovery purpose when the update is applied. Delete all these backups and change the credentials stored in AXIS Camera Station Pro.
[ Fixes ]Fixes and patches
- Security bulletin: Axis cve-2026-63286pdf-en-US-560650Vendor patch or bulletin · CERT-FR · axis.com/dam/public/c9/5c/29/cve-2026-63286pdf-en-US-560650.pdf, cited by CERT-FR CERTFR-2026-AVI-1408
[ Advisories ]Government CERT advisories
-
CERT-FRCERTFR-2026-AVI-1408
Vulnerability in Axis Camera Station Pro Translated from French
A vulnerability has been discovered in Axis Camera Station Pro. It allows an attacker to cause a breach of data confidentiality.
-
BSI CERT-BundWID-SEC-2026-4199
Axis Camera Station: Vulnerability allows an unspecified attack Translated from German