How many CVEs does Axis Communications have?

Axis Communications has 125 published CVE records since 2000, including 47 in the last two years.

How many Axis Communications CVEs are in CISA KEV?

None of Axis Communications's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which Axis Communications products have the most CVEs?

The Axis Communications products with the most published CVEs are AXIS OS, AXIS Camera Station Pro, 2100 network camera, camera station pro, axis_os_2022.

What are the most common weakness types in Axis Communications CVEs?

Axis Communications's CVEs most often map to these CWE weakness types: CWE-1287 (Improper Validation of Specified Type of Input), CWE-35 (Path Traversal: '.../...//'), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).

How many critical Axis Communications vulnerabilities are there?

Axis Communications has 16 critical and 45 high-severity CVEs.

What is the average severity of Axis Communications CVEs?

The average CVSS base score across Axis Communications's scored CVEs is 6.9.

RadicalNotion.AI

Log in Start free

125 CVEs

Axis Communications Vulnerabilities

Name: Axis Communications vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Axis Communications.

125

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

31

Public exploits

PoC or exploit code

6.9

Avg CVSS

2000–2026

Overview

Axis Communications has 125 published CVE records since 2000, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 31 have a known public exploit. The average CVSS base score across scored CVEs is 6.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Axis Communications products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on Axis Communications's vulnerability posture, as a share of its 125 published CVEs.

Average CVSS: 6.9
Critical / high: 49%
Actively exploited (KEV): 0%
Public exploit available: 25%
Patch available: 60%

Severity and exploitation

How the CVSS severity of Axis Communications's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical16

High45

Medium61

Low3

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Axis Communications's CVEs are currently listed in CISA's KEV catalog.

Public exploits

31

31 of Axis Communications's CVEs have a known public exploit available.

Most affected products

The Axis Communications products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Axis Communications CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Axis Communications CVE records.

Disclosure activity by year

How many Axis Communications CVEs were published each year.

2017

6

2018

10

2021

4

2022

4

2023

17

2024

16

2025

32

2026

15

Latest Axis Communications CVEs

The most recently disclosed vulnerabilities affecting Axis Communications.

A VAPIX API parameter had improper input validation which could allow code execution and...
CWE-732
High · CVSS 7.2
EPSS 0.4%2026-08-11
The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could...
CWE-367
Medium · CVSS 5.1
EPSS 0.1%2026-08-11
An ACAP configuration file lacks input validation, which could potentially lead to privilege...
CWE-1287
Medium · CVSS 5.7
EPSS 0.2%2026-08-11
The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could...
CWE-367
Medium · CVSS 5.7
EPSS 0.2%2026-08-11
The Signed Video Framework contained a buffer overflow issue which could lead the application...
Medium · CVSS 5.3
EPSS 0.2%2026-08-11
The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can...
CWE-290
Medium · CVSS 5.9
EPSS 0.3%2026-08-11
High vulnerability · 2026-05-12
CWE-732
High · CVSS 8.8
EPSS 0.2%2026-05-12
High vulnerability · 2026-05-12
CWE-35
High · CVSS 7.3
EPSS 0.1%2026-05-12
High vulnerability · 2026-05-12
CWE-1287
High · CVSS 7.3
EPSS 0.4%2026-05-12
High vulnerability · 2026-05-12
CWE-732
High · CVSS 7.3
EPSS 0.1%2026-05-12
Medium vulnerability · 2026-02-10
CWE-639
Medium · CVSS 5.7
EPSS 0.2%2026-02-10
Medium vulnerability · 2026-02-10
CWE-22
Medium · CVSS 4.6
EPSS 0.3%2026-02-10

Track new Axis Communications CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor Axis Communications CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

automattic126 CVEs swftools126 CVEs vadz126 CVEs langflow-ai125 CVEs Philips125 CVEs Mambo125 CVEs envoyproxy124 CVEs Checkmk124 CVEs

Browse all vendors

Frequently asked questions

Common questions about Axis Communications vulnerabilities.

How many CVEs does Axis Communications have?: Axis Communications has 125 published CVE records since 2000, including 47 in the last two years.
How many Axis Communications CVEs are in CISA KEV?: None of Axis Communications's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which Axis Communications products have the most CVEs?: The Axis Communications products with the most published CVEs are AXIS OS, AXIS Camera Station Pro, 2100 network camera, camera station pro, axis_os_2022.
What are the most common weakness types in Axis Communications CVEs?: Axis Communications's CVEs most often map to these CWE weakness types: CWE-1287 (Improper Validation of Specified Type of Input), CWE-35 (Path Traversal: '.../...//'), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).
Are there public exploits for Axis Communications vulnerabilities?: Yes — 31 of Axis Communications's CVEs have a known public exploit.
How many critical Axis Communications vulnerabilities are there?: Axis Communications has 16 critical and 45 high-severity CVEs.
What is the average severity of Axis Communications CVEs?: The average CVSS base score across Axis Communications's scored CVEs is 6.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Axis Communications vulnerabilities

Monitor new Axis Communications vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing