AXIS CAMERA STATION PRO · CVE-2026-8372 · Other
FIX → 6.18 ✓ verified
Axis reports a missing-authentication flaw (CWE-306, CVSS 8.8) in AXIS Camera Station Pro 6.13 to 6.17, found via its bug bounty. Axis gives no technical detail, says no public exploits exist and it is not aware of exploitation. Fixed in 6.18.
first public Nov 10, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams running AXIS Camera Station Pro (video management software) 6.13 to 6.17. Axis does not say how the flaw is reached, so treat any exposed install as at risk. Versions before 6.13 and 6.18 or later are not listed as affected.
Who cares axis, axis-camera-station-pro, self-hosted, video-surveillance
Check the installed AXIS Camera Station Pro version. 6.13 through 6.17 are affected; 6.18 contains the fix.
Upgrade to 6.18
Update AXIS Camera Station Pro to 6.18 or later.
A vulnerability that could allow an attacker to gain unauthorized access.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.