← Back

Axeltechnology

axeltechnology

3 CVEs • 8 products

Products (8)

Click to collapse
Toggle
Puma Firmware
puma_firmware
Wolf1ms
wolf1ms
Wolf2ms
wolf2ms
Puma
puma

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Axeltechnology
1Streamermax Mk Ii Firmware
Jan 15, 2026
Nov 19, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The Axel Technology StreamerMAX MK II devices (firmware versions 0.8.5 to 1.0.3) are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attacke...Show more
The Axel Technology StreamerMAX MK II devices (firmware versions 0.8.5 to 1.0.3) are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and modify system settings, leading to full compromise of the device.Show less
1Axeltechnology
1Puma Firmware
Jan 12, 2026
Nov 19, 2025
N/A· v4
9.1 CRITICAL· v3
N/A· v2
The Axel Technology puma devices (firmware versions 0.8.5 to 1.0.3) are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list u...Show more
The Axel Technology puma devices (firmware versions 0.8.5 to 1.0.3) are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and modify system settings, leading to full compromise of the device.Show less
1Axeltechnology
2Wolf1ms Firmware
Wolf2ms Firmware
Jan 12, 2026
Nov 19, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The Axel Technology WOLF1MS and WOLF2MS devices (firmware versions 0.8.5 to 1.0.3) are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attac...Show more
The Axel Technology WOLF1MS and WOLF2MS devices (firmware versions 0.8.5 to 1.0.3) are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and modify system settings, leading to full compromise of the device.Show less