Threat Intelligence Database

CVE-2026-6181 is an authentication bypass vulnerability in the Device Configuration Framework of Axis Communications AB AXIS OS. The flaw requires prior authentication with a viewer-privileged service account to be exploited. It allows bypassing authentication controls, potentially leading to unauthorized access with high confidentiality and integrity impact. The vulnerability affects AXIS OS versions 11.11.0 and 12.0.0. No official patch or remediation guidance has been provided by the vendor as of the publication date. The CVSS v3.1 base score is 5.9, indicating a medium severity level.

CVE-2026-5304 is a medium severity vulnerability in Axis Communications AB AXIS OS version 12.0.0. It involves improper validation of input in an ACAP configuration file, which could allow privilege escalation. Exploitation requires the device to permit installation of unsigned ACAP applications and user interaction to install a malicious ACAP application.