---
id: "CVE-2026-4762"
page: "https://infrastack.ai/live/CVE-2026-4762"
kind: "vulnerability"
aliases: ["CVE-2026-4762"]
title: "AXIS Camera Station: privilege escalation flaw (CVE-2026-4762, CVSS 8.8), advisory details pending"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "other"
products: [{"name": "AXIS Camera Station", "fixed": [], "affected": "unknown (Axis has not published versions yet)", "ecosystem": "vendor"}]
ecosystems: []
tags: ["axis", "axis-camera-station", "other", "privilege-escalation", "self-hosted", "server", "video-management"]
not_affected_if: []
published_at: "2026-11-10T06:17:09+00:00"
first_seen_at: "2026-11-10T06:20:23+00:00"
updated_at: "2026-11-10T06:23:52+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4762", "first_seen_at": "2026-11-10T06:20:23+00:00"}, {"source": "analyst", "url": "https://help.axis.com/en-us/security-advisories", "first_seen_at": "2026-11-10T06:23:52+00:00", "cites": ["https://help.axis.com/en-us/security-advisories"]}]
exploit_sources: []
---

# AXIS Camera Station: privilege escalation flaw (CVE-2026-4762, CVSS 8.8), advisory details pending

Link for people: https://infrastack.ai/live/CVE-2026-4762 (this .md is for agents)

Axis lists CVE-2026-4762 (CVSS 8.8 High) in its security advisory registry under the AXIS Camera Station section. The registry says the CVE will be disclosed externally on 10 November 2026 and gives the released version as TBA. The NVD text says a non-admin user can escalate privileges on the server. Affected versions and the fixed version are not yet published.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:AXIS Camera Station affected unknown (Axis has not published versions yet) fixed no fixed version listed

## How to check

Unknown until Axis publishes the advisory. Check the installed AXIS Camera Station version and compare it with the advisory at https://help.axis.com/en-us/security-advisories once the CVE-2026-4762 entry gets a released version. Also limit non-admin accounts on the server meanwhile.

## Timeline

- 2026-11-10T06:20:23+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-4762
- 2026-11-10T06:23:52+00:00 analyst https://help.axis.com/en-us/security-advisories — NVD record was vague; CNA is Axis. Axis registry lists CVE-2026-4762 under AXIS Camera Station, 8.8, version TBA, disclosure scheduled 2026-11-10. Same text as CVE-2025-11547. No advisory PDF found yet; revisit. Nothing verified.

## Documents

- [advisory] Axis security advisories registry (Nov 2026) https://help.axis.com/en-us/security-advisories

## From the sources

A vulnerability to perform a privilege escalation attack on the server as a non-admin user.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_