CVE-2025-8998

Published: Nov 11, 2025Modified: Jun 17, 2026Deferred

3.1

Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Exploitability: 1.6 / Impact: 1.4

Source: product-security@axis.com (Secondary)

Description

It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and impact usability. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account.

Related CWEs

CWE-73

External Control of File Name or Path

The product allows user input to control or influence paths or file names that are used in filesystem operations.

References (1)

https://www.axis.com/dam/public/f5/62/80/cve-2025-8998pdf-en-US-504374.pdf

Source: product-security@axis.com

Timeline

No history available yet.