{"id":"CVE-2026-12389","kind":"vulnerability","aliases":["CVE-2026-12389"],"related":[],"title":"AXIS Camera Station: privileged user can achieve remote code execution (fix version not yet published)","description":"A vulnerability that could lead to a high privileged authenticated user performing a remote code execution attack.","summary":"Axis (the CNA) lists CVE-2026-12389 (CVSS 8.4, High) under AXIS Camera Station in its security advisory registry. The released version is 'TBA' and the entry says more detail follows on 10 November 2026. NVD describes a high-privileged authenticated user performing a remote code execution attack. Vector is adjacent network, high privileges required. No exploitation or PoC seen.","severity":"high","cvss":8.4,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"AXIS Camera Station","fixed":[],"affected":"unknown","ecosystem":"vendor"}],"ecosystems":[],"tags":["axis","axis-camera-station","other","rce","windows"],"not_affected_if":["auth-required"],"how_to_check":"Check the installed AXIS Camera Station version (Help > About in the client). Compare it with the Axis advisory for CVE-2026-12389 once Axis publishes the affected range; the registry says 'TBA' for now. Also review who holds administrator-level accounts on the server.","fix":null,"status":"open","published_at":"2026-11-10T06:17:08+00:00","first_seen_at":"2026-11-10T06:20:23+00:00","triaged_at":"2026-11-10T06:22:12+00:00","updated_at":"2026-11-10T06:24:46+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-11-10T06:22:12Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Unidentified product: privileged user can achieve remote code execution","impact":"high","summary":"The NVD description says a highly privileged authenticated user can perform a remote code execution attack. The affected product, versions and fix are not named in the sources.","audience":"businesses","category":"other","nicknames":[],"who_cares":[],"confidence":0.3,"fix_status":"unknown","needs_auth":"yes","worst_case":"Privileged user runs code remotely on the affected server","analyst_note":"Identify the affected product and versions from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-12389 and the CNA advisory it links to.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000622,"input_tokens":4478,"output_tokens":348,"severity_before":"high"},"analyst_status":"done","analyst_note":"Identify the affected product and versions from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-12389 and the CNA advisory it links to.","search":"'-12389':18A,21A,39B '-2026':17A,20A,38B '10':65B '2026':67B '8.4':41B 'achiev':7A 'adjac':84B 'advisori':50B 'attack':81B,110C 'authent':74B,103C 'axi':1A,25B,27B,33B,44B 'axis':22A 'axis-camera-st':26B 'camera':2A,23A,28B,45B 'cna':35B 'code':9A,79B,108C 'could':97C 'cve':16A,19A,37B 'cvss':40B 'describ':69B 'detail':62B 'entri':59B 'execut':10A,80B,109C 'exploit':90B 'fix':11A 'follow':63B 'high':42B,72B,86B,101C 'high-privileg':71B 'lead':98C 'list':36B 'network':85B 'novemb':66B 'nvd':68B 'perform':76B,105C 'poc':92B 'privileg':4A,73B,87B,102C 'publish':15A 'rce':31B 'registri':51B 'releas':53B 'remot':8A,78B,107C 'requir':88B 'say':60B 'secur':49B 'seen':93B 'station':3A,24A,29B,46B 'tba':56B 'user':5A,75B,104C 'vector':82B 'version':12A,54B 'vulner':95C 'window':32B 'yet':14A","nicknames":[],"mitigations":[],"who_affected":"Teams running AXIS Camera Station (the video management server and clients) are the ones Axis lists for this CVE. An attacker needs an account with high privileges and access from an adjacent network. Which Camera Station editions and versions are affected has not been published yet. Anyone not running Camera Station can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["axiscamerastation","camerastation"],"ptokens":["axis","camera","station"],"labels":["axis","axiscamerastation","high","other","rce","windows"],"campaign_type":null,"search_a":"'-12389':18A,21A '-2026':17A,20A 'achiev':7A 'axi':1A 'axis':22A 'camera':2A,23A 'code':9A 'cve':16A,19A 'execut':10A 'fix':11A 'privileg':4A 'publish':15A 'remot':8A 'station':3A,24A 'user':5A 'version':12A 'yet':14A","search_b":"'-12389':39B '-2026':38B '10':65B '2026':67B '8.4':41B 'adjac':84B 'advisori':50B 'attack':81B 'authent':74B 'axi':25B,27B,33B,44B 'axis-camera-st':26B 'camera':28B,45B 'cna':35B 'code':79B 'cve':37B 'cvss':40B 'describ':69B 'detail':62B 'entri':59B 'execut':80B 'exploit':90B 'follow':63B 'high':42B,72B,86B 'high-privileg':71B 'list':36B 'network':85B 'novemb':66B 'nvd':68B 'perform':76B 'poc':92B 'privileg':73B,87B 'rce':31B 'registri':51B 'releas':53B 'remot':78B 'requir':88B 'say':60B 'secur':49B 'seen':93B 'station':29B,46B 'tba':56B 'user':75B 'vector':82B 'version':54B 'window':32B","search_c":"'attack':110C 'authent':103C 'code':108C 'could':97C 'execut':109C 'high':101C 'lead':98C 'perform':105C 'privileg':102C 'remot':107C 'user':104C 'vulner':95C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T06:17:08+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss_by":"product-security@axis.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-12389","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12389","severity":null,"published_at":"2026-11-10T06:17:08+00:00","modified_at":"2026-11-10T06:17:08+00:00","first_seen_at":"2026-11-10T06:20:23+00:00","fetched_at":"2026-11-10T06:20:23+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-12389:2418","url":"https://help.axis.com/en-us/security-advisories","severity":null,"published_at":"2026-11-10T06:24:46+00:00","modified_at":"2026-11-10T06:24:46+00:00","first_seen_at":"2026-11-10T06:24:46+00:00","fetched_at":"2026-11-10T06:24:46+00:00","note":"Axis registry (help.axis.com security-advisories) lists CVE-2026-12389 under AXIS Camera Station, 8.4 High, release TBA, details due 10 Nov 2026. No detailed advisory yet; revisit for affected/fixed versions. X and Exa search not used for discussion. Nothing marked verified.","cites":["https://help.axis.com/en-us/security-advisories"]}],"documents":[{"id":113491,"url":"https://help.axis.com/en-us/security-advisories","title":"Axis security advisories registry (Nov 2026)","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}