AXIS CAMERA STATION · CVE-2026-4762 · Other
NO FIX YET
Axis lists CVE-2026-4762 (CVSS 8.8 High) in its security advisory registry under the AXIS Camera Station section. The registry says the CVE will be disclosed externally on 10 November 2026 and gives the released version as TBA. The NVD text says a non-admin user can escalate privileges on the server. Affected versions and the fixed version are not yet published.
first public Nov 10, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams running the AXIS Camera Station server (the registry section does not say whether that means Pro, the classic 5.x line, or both) are the ones to look at. NVD describes a non-admin user escalating to admin privileges on the server, and the CVSS vector is local, low privileges. Axis has not published affected versions yet, so anyone who runs Camera Station should watch the Axis advisory page.
Who cares axis, axis-camera-station, privilege-escalation, self-hosted, server, video-management
No fix yet, per the sources.
A vulnerability to perform a privilege escalation attack on the server as a non-admin user.
This page as .md · .json · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.