---
id: "CVE-2026-8372"
page: "https://infrastack.ai/live/CVE-2026-8372"
kind: "vulnerability"
aliases: ["CVE-2026-8372"]
title: "AXIS Camera Station Pro 6.13\u20136.17: missing authentication allows unauthorized access"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "other"
products: [{"name": "AXIS Camera Station Pro", "fixed": ["6.18"], "affected": ">= 6.13, < 6.18", "ecosystem": "vendor"}]
ecosystems: []
tags: ["axis", "axis-camera-station-pro", "other", "self-hosted", "video-surveillance"]
not_affected_if: []
published_at: "2026-11-10T06:17:10+00:00"
first_seen_at: "2026-11-10T06:20:23+00:00"
updated_at: "2026-11-10T06:23:33+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8372", "first_seen_at": "2026-11-10T06:20:23+00:00"}, {"source": "analyst", "url": "https://www.axis.com/dam/public/09/58/fa/cve-2026-8372pdf-en-US-561247.pdf", "first_seen_at": "2026-11-10T06:23:33+00:00", "cites": ["https://www.axis.com/dam/public/09/58/fa/cve-2026-8372pdf-en-US-561247.pdf"]}]
exploit_sources: []
---

# AXIS Camera Station Pro 6.13–6.17: missing authentication allows unauthorized access

Link for people: https://infrastack.ai/live/CVE-2026-8372 (this .md is for agents)

Axis reports a missing-authentication flaw (CWE-306, CVSS 8.8) in AXIS Camera Station Pro 6.13 to 6.17, found via its bug bounty. Axis gives no technical detail, says no public exploits exist and it is not aware of exploitation. Fixed in 6.18.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:AXIS Camera Station Pro affected >= 6.13, < 6.18 fixed 6.18

## How to check

Check the installed AXIS Camera Station Pro version. 6.13 through 6.17 are affected; 6.18 contains the fix.

## Fix

Update AXIS Camera Station Pro to 6.18 or later.

## Timeline

- 2026-11-10T06:20:23+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-8372
- 2026-11-10T06:23:33+00:00 analyst https://www.axis.com/dam/public/09/58/fa/cve-2026-8372pdf-en-US-561247.pdf — Axis advisory (primary) read: CWE-306, ACS Pro 6.13-6.17, fixed 6.18, no known exploits per Axis. Axis withholds details; no mitigations or workarounds stated.

## Documents

- [advisory] Axis Security Advisory CVE-2026-8372 https://www.axis.com/dam/public/09/58/fa/cve-2026-8372pdf-en-US-561247.pdf

## From the sources

A vulnerability that could allow an attacker to gain unauthorized access.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_