CVE-2026-63287: Medium severity Axis AXIS Camera Station vulnerability
Published Nov 10, 2026
·Updated
It was possible for an authenticated non-admin user to modify certain data objects without having the appropriate permissions, which could be used to tamper with audit log creation in AXIS Camera Station.
Affected Software
1 affected component
Axis AXIS Camera Station
Event History
Nov 10, 2026
CVE Published
via MITRE·05:50 AM
Data Sourced
via MITRE·05:50 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require administrative privileges or user interaction?
No administrative privileges are required, but the attacker must be authenticated as a non-admin user. No user interaction is required.
2
What is the expected security impact?
The vulnerability affects integrity, allowing modification of certain data objects without the required permissions. It could be used to tamper with audit log creation; no confidentiality or availability impact is indicated.