AXIS CAMERA STATION · CVE-2026-63287 · Infrastructure
NO FIX YET
An authenticated non-admin user could modify certain data objects without the required permissions in AXIS Camera Station. This could be used to tamper with audit log creation.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Organizations running AXIS Camera Station video management software where non-admin accounts exist. The sources do not state which versions or configurations are affected.
Not affected if admin-only-accounts
Who cares axis-camera-station, video-surveillance
Unknown from the sources.
No fix yet, per the sources.
It was possible for an authenticated non-admin user to modify certain data objects without having the appropriate permissions, which could be used to tamper with audit log creation in AXIS Camera Station.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.