← Back

CVE-2026-1185

nvd nist
Published: May 12, 2026Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

A configuration file on the local file system had improper input validation which could allow code execution and potentially lead to privilege escalation. This vulnerability can only be exploited if an attacker can log in to the Axis device using SSH.

Affected (1)

Products: Axis: Axis Os
Axis
1 product
Axis Os
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Axis Os
From 12.0.0 to 12.10.37

Related CWEs

CWE-732
Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (1)

Source: product-security@axis.com
Vendor Advisory

Timeline

No history available yet.