AXIS CAMERA STATION · CVE-2026-12963 · Infrastructure
NO FIX YET · SEE WHAT TO DO
A flaw lets a low-privilege viewer account gain access to network attached storage devices reachable from the server. An attacker with a viewer login could read or change data on those storage devices.
first public Nov 10, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Axis lists this CVE under AXIS Camera Station (the video management software). Teams running AXIS Camera Station with network storage reachable from the server, and with viewer-level accounts given to others, should look at it. Axis has not yet published affected versions or details, so the exact scope is unconfirmed. Teams that do not run AXIS Camera Station can skip it.
Who cares axis, axis-camera-station, network-attached-storage, self-hosted, windows
A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on the server.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.