---
id: "CVE-2026-13312"
page: "https://infrastack.ai/live/CVE-2026-13312"
kind: "vulnerability"
aliases: ["CVE-2026-13312"]
title: "Axis Camera Station Pro and Camera Station 5: critical flaw (CVSS 9.9), details withheld by Axis"
severity: "critical"
cvss: 9.9
epss: null
exploited: false
status: "open"
category: "other"
products: [{"name": "AXIS Camera Station Pro", "fixed": ["6.17"], "affected": ">= 6.0, < 6.17", "ecosystem": "vendor"}, {"name": "AXIS Camera Station 5", "fixed": ["5.59 SR 2"], "affected": ">= 5.0, < 5.59 SR 2", "ecosystem": "vendor"}]
ecosystems: []
tags: ["axis", "camera-station", "other", "self-hosted", "video-surveillance"]
not_affected_if: []
published_at: "2026-11-10T06:17:08+00:00"
first_seen_at: "2026-11-10T06:20:23+00:00"
updated_at: "2026-11-10T06:23:34+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13312", "first_seen_at": "2026-11-10T06:20:23+00:00"}, {"source": "analyst", "url": "https://www.axis.com/dam/public/e4/2d/85/cve-2026-13312pdf-en-US-561251.pdf", "first_seen_at": "2026-11-10T06:23:34+00:00", "cites": ["https://www.axis.com/dam/public/e4/2d/85/cve-2026-13312pdf-en-US-561251.pdf"]}]
exploit_sources: []
---

# Axis Camera Station Pro and Camera Station 5: critical flaw (CVSS 9.9), details withheld by Axis

Link for people: https://infrastack.ai/live/CVE-2026-13312 (this .md is for agents)

Axis Communications says a bug-bounty researcher found a flaw in AXIS Camera Station Pro and AXIS Camera Station 5 that could let an attacker compromise a system (CWE-1287, improper validation of input type). Axis will not give more detail and says it knows of no public exploits or exploitation. The CVSS vector is network, low complexity, low privileges, no user interaction, scope changed.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:AXIS Camera Station Pro affected >= 6.0, < 6.17 fixed 6.17
- vendor:AXIS Camera Station 5 affected >= 5.0, < 5.59 SR 2 fixed 5.59 SR 2

## How to check

Open AXIS Camera Station Pro and check the version: affected if below 6.17. For AXIS Camera Station 5, affected if below 5.59 SR 2.

## Fix

Update AXIS Camera Station Pro to 6.17 or later; AXIS Camera Station 5 to 5.59 SR 2 or later.

## Timeline

- 2026-11-10T06:20:23+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-13312
- 2026-11-10T06:23:34+00:00 analyst https://www.axis.com/dam/public/e4/2d/85/cve-2026-13312pdf-en-US-561251.pdf — Axis advisory (primary) read: Camera Station Pro <6.17 and Camera Station 5 <5.59 SR2; Axis withholds details, no known exploit. Vector AV:N/PR:L (low-priv auth, network).

## Documents

- [advisory] Axis Security Advisory CVE-2026-13312 https://www.axis.com/dam/public/e4/2d/85/cve-2026-13312pdf-en-US-561251.pdf

## From the sources

A vulnerability that could allow an attacker to compromise a system.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_