Axis Camera Station Pro — known CVE vulnerabilities

Every CVE whose affected-product data names Axis Camera Station Pro, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (11)

• CVE-2025-30026 — CVSS 9.8 (critical): The AXIS Camera Station Server had a flaw that allowed to bypass authentication that is normally required.
• CVE-2025-30023 — CVSS 9.0 (critical): The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code…
• CVE-2025-11547 — CVSS 7.8 (high): AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server as a non-admin user.
• CVE-2025-30025 — CVSS 7.8 (high): The communication protocol used between the server process and the service control had a flaw that could lead to a local privilege…
• CVE-2024-7696 — CVSS 6.3 (medium): Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for an authenticated malicious client to…
• CVE-2025-1056 — CVSS 6.1 (medium): Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a specific file that the server is using. A…
• CVE-2025-0926 — CVSS 5.9 (medium): Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for a non-admin user to remove system files…
• CVE-2025-7622 — CVSS 5.7 (medium): During an internal security assessment, a Server-Side Request Forgery (SSRF) vulnerability that allowed an authenticated attacker to access…
• CVE-2025-12063 — CVSS 5.7 (medium): An insecure direct object reference allowed a non-admin user to modify or remove certain data objects without having the appropriate…
• CVE-2025-12757 — CVSS 4.6 (medium): An AXIS Camera Station Pro feature can be exploited in a way that allows a non-admin user to view information they are not permitted to.
• CVE-2025-13064 — CVSS 4.5 (medium): A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script which is executed by…