How many CVEs does Axis Communications AXIS OS have?

Axis Communications AXIS OS has 57 published CVE records since 2021.

How many Axis Communications AXIS OS CVEs are in CISA KEV?

None of Axis Communications AXIS OS's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Axis Communications AXIS OS vulnerabilities?

No Axis Communications AXIS OS CVEs currently have a tracked public exploit in this dataset.

Which versions of Axis Communications AXIS OS are affected?

219 distinct Axis Communications AXIS OS versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Axis Communications AXIS OS CVEs?

Axis Communications AXIS OS's CVEs most often map to these CWE weakness types: CWE-1287 (Improper Validation of Specified Type of Input), CWE-35 (Path Traversal: '.../...//'), CWE-1286 (Improper Validation of Syntactic Correctness of Input), CWE-732 (Incorrect Permission Assignment for Critical Resource).

How many critical Axis Communications AXIS OS vulnerabilities are there?

Axis Communications AXIS OS has 2 critical and 21 high-severity CVEs.

What is the average severity of Axis Communications AXIS OS CVEs?

The average CVSS base score across Axis Communications AXIS OS's scored CVEs is 6.7.

Axis Communications AXIS OS Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every Axis Communications AXIS OS version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

AXIS OS 5.511 CVE
AXIS OS 6.501 CVE

Version ranges

< 11.7.573 CVEs
< 10.72 CVEs
>= 11.112 CVEs
>= AXIS OS 5.51 or later2 CVEs
10.0.0 <= v < 10.12.2702 CVEs
11.0.89 <= v < 11.6.942 CVEs
11.11.0 <= v < 11.11.1352 CVEs
11.11.0 <= v < 12.2.522 CVEs
12.0.0 <= v < 12.11.442 CVEs
12.0.0 <= v < 12.2.522 CVEs
12.0.0 <= v < 12.3.562 CVEs
6.50.0 <= v < 6.50.5.192 CVEs
6.50.0 <= v < 6.50.5.212 CVEs
< 10.81 CVE
< 11.6.941 CVE
< 11.8.611 CVE
< 12.6.281 CVE
< 6.50.5.151 CVE
<= 10.12.1781 CVE
>= 6.50 - 11.101 CVE
>= 8.40 - 11.101 CVE
>= AXIS OS 10.11 - 11.51 CVE
>= AXIS OS 10.12 - 11.81 CVE
>= AXIS OS 10.5 – 11.51 CVE
>= AXIS OS 10.7 – 11.61 CVE
>= AXIS OS 10.8 - 11.61 CVE
>= AXIS OS 11.0.X - 11.3.x1 CVE
>= AXIS OS 11.8, 10.12, 9.80, 8.40, 6.501 CVE
>= AXIS OS 5.51 -11.91 CVE
>= AXIS OS 6.40 or later1 CVE
>= AXIS OS 6.50 - 11.81 CVE
>= AXIS OS 6.50 – 11.51 CVE
>= AXIS OS 6.50 – 11.61 CVE
>= AXIS OS 8.50 – 11.61 CVE
10.0.0 <= v < 10.12.2491 CVE
10.0.0 <= v < 10.12.2591 CVE
10.0.0 <= v < 10.12.2781 CVE
10.0.0 <= v < 10.12.3051 CVE
10.0.0 <= v < 10.12.3061 CVE
10.10 <= v < 11.111 CVE
10.10.0 <= v < 10.12.2471 CVE
10.11 <= v <= 11.51 CVE
10.11.55 <= v < 10.12.2061 CVE
10.12.0 <= v < 10.12.2761 CVE
10.12.0 <= v < 11.9.531 CVE
10.12.0 <= v < 12.3.561 CVE
10.5 <= v <= 11.51 CVE
10.5.0 <= v < 10.12.1991 CVE
10.8 <= v < 11.7.571 CVE
10.8 <= v <= 11.61 CVE
10.9 <= v < 11.111 CVE
10.9.0 <= v < 10.12.2461 CVE
10.9.0 <= v < 10.12.2571 CVE
10.9.0 <= v < 12.1.211 CVE
11.0 <= v <= 11.5.531 CVE
11.0.0 <= v < 11.11.1161 CVE
11.0.0 <= v < 11.11.1181 CVE
11.0.0 <= v < 11.11.1271 CVE
11.0.0 <= v < 11.11.1351 CVE
11.0.0 <= v < 11.11.1411 CVE
11.0.0 <= v < 11.11.1421 CVE
11.0.0 <= v < 11.11.1771 CVE
11.0.0 <= v < 11.11.1781 CVE
11.0.0 <= v < 11.11.801 CVE
11.0.0 <= v < 11.11.851 CVE
11.0.0 <= v < 11.11.931 CVE
11.0.81 <= v < 11.6.941 CVE
11.0.89 <= v < 11.4.521 CVE
11.11.0 <= v < 11.11.1261 CVE
11.11.0 <= v < 11.11.1411 CVE
11.11.0 <= v < 11.11.1691 CVE
11.11.0 <= v < 11.11.2071 CVE
11.11.0 <= v < 11.11.801 CVE
11.11.0 <= v < 11.11.941 CVE
11.11.0 <= v < 12.2.411 CVE
11.11.0 <= v < 12.3.561 CVE
11.8 <= v < 11.111 CVE
11.8.0 <= v < 11.11.1401 CVE
11.8.0 <= v < 11.11.851 CVE
12.0.0 <= v < 12.0.401 CVE
12.0.0 <= v < 12.0.471 CVE
12.0.0 <= v < 12.1.211 CVE
12.0.0 <= v < 12.1.281 CVE
12.0.0 <= v < 12.10.361 CVE
12.0.0 <= v < 12.10.371 CVE
12.0.0 <= v < 12.10.41 CVE
12.0.0 <= v < 12.11.121 CVE
12.0.0 <= v < 12.11.131 CVE
12.0.0 <= v < 12.11.311 CVE
12.0.0 <= v < 12.2.411 CVE
12.0.0 <= v < 12.3.11 CVE
12.0.0 <= v < 12.3.331 CVE
12.0.0 <= v < 12.3.361 CVE
12.0.0 <= v < 12.3.41 CVE
12.0.0 <= v < 12.4.01 CVE
12.0.0 <= v < 12.4.281 CVE
12.0.0 <= v < 12.5.311 CVE
12.0.0 <= v < 12.5.361 CVE
12.0.0 <= v < 12.6.181 CVE
12.0.0 <= v < 12.6.281 CVE
12.0.0 <= v < 12.6.301 CVE
12.0.0 <= v < 12.6.401 CVE
12.0.0 <= v < 12.6.661 CVE
12.0.0 <= v < 12.6.691 CVE
12.0.0 <= v < 12.6.71 CVE
12.0.0 <= v < 12.7.111 CVE
12.0.0 <= v < 12.7.271 CVE
12.0.0 <= v < 12.7.311 CVE
12.0.0 <= v < 12.7.331 CVE
12.0.0 <= v < 12.9.321 CVE
12.0.0 <= v < 12.9.331 CVE
12.0.0. <= v < 12.6.71 CVE
12.6.54 <= v < 12.7.361 CVE
12.6.54 <= v <= 12.7.351 CVE
5.51 <= v <= 11.91 CVE
6.50.0 <= v < 6.50.5.221 CVE
6.50.5.3 <= v < 6.50.5.141 CVE
7.0.0 <= v < 8.40.591 CVE
7.0.0 <= v < 8.40.661 CVE
7.0.0 <= v < 8.40.741 CVE
7.0.0 <= v < 8.40.891 CVE
7.0.0 <= v < 8.40.901 CVE
9.0.0 <= v < 9.80.1001 CVE
9.0.0 <= v < 9.80.1231 CVE
9.0.0 <= v < 9.80.1241 CVE
9.0.0 <= v < 9.80.781 CVE
9.0.0 <= v < 9.80.901 CVE
9.80.0 <= v < 9.80.841 CVE
9.80.0 <= v < 9.80.891 CVE

Fixed in

11.7.574 CVEs
11.11.1353 CVEs
11.6.943 CVEs
10.12.2702 CVEs
10.72 CVEs
11.11.1412 CVEs
12.11.442 CVEs
12.2.522 CVEs
12.3.562 CVEs
6.50.5.192 CVEs
6.50.5.212 CVEs
10.12.1991 CVE
10.12.2061 CVE
10.12.2461 CVE

Find a version

57 CVEs

Sort

A VAPIX API parameter had improper input validation which could allow code execution and...
CVE-2026-4757
Patch
CWE-732
High · CVSS 7.2
EPSS 0.4% (33th pct)2026-08-11
The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could...
CVE-2026-6505
Patch
CWE-367
Medium · CVSS 5.1
EPSS 0.1% (0th pct)2026-08-11
An ACAP configuration file lacks input validation, which could potentially lead to privilege...
CVE-2026-5304
Patch
CWE-1287
Medium · CVSS 5.7
EPSS 0.2% (14th pct)2026-08-11
The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could...
CVE-2026-5303
Patch
CWE-367
Medium · CVSS 5.7
EPSS 0.2% (7th pct)2026-08-11
The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can...
CVE-2026-6181
Patch
CWE-290
Medium · CVSS 5.9
EPSS 0.3% (22th pct)2026-08-11
High vulnerability · 2026-05-12
CVE-2026-1185
Patch
CWE-732
High · CVSS 8.8
EPSS 0.2% (14th pct)2026-05-12
High vulnerability · 2026-05-12
CVE-2026-0804
Patch
CWE-35
High · CVSS 7.3
EPSS 0.1% (3th pct)2026-05-12
High vulnerability · 2026-05-12
CVE-2026-0802
Patch
CWE-1287
High · CVSS 7.3
EPSS 0.4% (34th pct)2026-05-12
High vulnerability · 2026-05-12
CVE-2026-0541
Patch
CWE-732
High · CVSS 7.3
EPSS 0.1% (1th pct)2026-05-12
High vulnerability · 2026-02-10
CVE-2025-11142
Patch
CWE-78
High · CVSS 8.8
EPSS 0.5% (43th pct)2026-02-10
Medium vulnerability · 2025-11-11
CVE-2025-9055
Patch
CWE-250
Medium · CVSS 6.4
EPSS 0.1% (2th pct)2025-11-11
Low vulnerability · 2025-11-11
CVE-2025-8998
Patch
CWE-73
Low · CVSS 3.1
EPSS 0.2% (14th pct)2025-11-11
Medium vulnerability · 2025-11-11
CVE-2025-9524
Patch
CWE-1287
Medium · CVSS 4.3
EPSS 0.3% (17th pct)2025-11-11
Medium vulnerability · 2025-11-11
CVE-2025-8108
Patch
CWE-732
Medium · CVSS 6.7
EPSS 0.1% (3th pct)2025-11-11
Medium vulnerability · 2025-11-11
CVE-2025-6779
Patch
CWE-732
Medium · CVSS 6.7
EPSS 1.1% (63th pct)2025-11-11
Medium vulnerability · 2025-11-11
CVE-2025-6571
Patch
CWE-522
Medium · CVSS 6.0
EPSS 0.1% (1th pct)2025-11-11
Medium vulnerability · 2025-11-11
CVE-2025-5452
Patch
CWE-214
Medium · CVSS 6.6
EPSS 0.3% (22th pct)2025-11-11
Medium vulnerability · 2025-11-11
CVE-2025-6298
Patch
CWE-1287
Medium · CVSS 6.7
EPSS 0.1% (3th pct)2025-11-11
Medium vulnerability · 2025-11-11
CVE-2025-5718
Patch
CWE-59
Medium · CVSS 6.8
EPSS 0.4% (29th pct)2025-11-11
Medium vulnerability · 2025-11-11
CVE-2025-5454
Patch
CWE-35
Medium · CVSS 6.7
EPSS 0.2% (5th pct)2025-11-11
Medium vulnerability · 2025-11-11
CVE-2025-4645
Patch
CWE-1287
Medium · CVSS 6.7
EPSS 0.1% (4th pct)2025-11-11
Medium vulnerability · 2025-08-12
CVE-2025-30027
Patch
CWE-1287
Medium · CVSS 6.7
EPSS 0.2% (5th pct)2025-08-12
Medium vulnerability · 2025-08-12
CVE-2025-3892
Patch
CWE-250
Medium · CVSS 6.7
EPSS 0.1% (4th pct)2025-08-12
High vulnerability · 2025-06-02
CVE-2025-0358
Patch
CWE-269
High · CVSS 8.8
EPSS 0.2% (16th pct)2025-06-02
Medium vulnerability · 2025-06-02
CVE-2025-0325
Patch
CWE-1287
Medium · CVSS 4.3
EPSS 0.4% (32th pct)2025-06-02
Critical vulnerability · 2025-06-02
CVE-2025-0324
Patch
CWE-791
Critical · CVSS 9.4
EPSS 0.4% (34th pct)2025-06-02
Medium vulnerability · 2025-04-08
CVE-2025-0361
Patch
CWE-203
Medium · CVSS 5.3
EPSS 0.3% (26th pct)2025-04-08
Medium vulnerability · 2025-04-08
CVE-2024-47261
Patch
CWE-1287
Medium · CVSS 4.3
EPSS 0.4% (31th pct)2025-04-08
High vulnerability · 2025-03-04
CVE-2025-0360
Patch
CWE-863
High · CVSS 7.8
EPSS 0.1% (4th pct)2025-03-04
High vulnerability · 2025-03-04
CVE-2025-0359
Patch
CWE-863
High · CVSS 8.5
EPSS 0.1% (4th pct)2025-03-04

Showing 30 of 57

Axis Communications AXIS OS Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other Axis Communications products

Frequently asked questions

References

Track Axis Communications AXIS OS vulnerabilities