AXIS OS vulnerabilities and CVEs

Known vulnerabilities affecting AXIS OS, with exploit availability attached to each one, so you can tell a flaw someone has written code for from one nobody has.

5 vulnerabilities tracked.

6.7 The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalation. CVE-2026-14542 10 Nov 2026
6.7 A locally authenticated user can achieve privilege escalation via an insecure configuration that leads to unauthorized code execution. CVE-2026-9063 10 Nov 2026
6.5 Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which could lead to privilege… CVE-2026-63282 10 Nov 2026
4.3 The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality. CVE-2026-13409 10 Nov 2026
3.9 The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting unauthorized access… CVE-2026-14543 10 Nov 2026

What this covers

This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that AXIS OS is free of vulnerabilities.

Query this from an agent over MCP · Check a lockfile by version

Other products tracked here