CERT-FR advisory CERTFR-2026-AVI-1408: data confidentiality flaw in Axis Camera Station Pro (CVE-2026-63286)
CERT-FR published advisory CERTFR-2026-AVI-1408 on 28 October 2026 relaying an Axis security bulletin for CVE-2026-63286. The vulnerability affects Axis Camera Station Pro in versions prior to 6.20 and allows an attacker to cause a breach of data confidentiality. No details on exploitability, attack vector or in-the-wild activity are provided. Users are directed to the vendor bulletin for fixes.
Entenda a falha
A vulnerabilidade
CVE-2026-63286 is a vulnerability in Axis Camera Station Pro that lets an attacker breach data confidentiality. The sources do not say which component is affected, what access or authentication is needed, or what data is exposed. Versions before 6.20 are affected; 6.20 or later is the fixed release, per the Axis bulletin relayed by CERT-FR.
Como foi descoberta
The articles do not say who found the flaw or how. CERT-FR published advisory CERTFR-2026-AVI-1408 on 28 October 2026, relaying an Axis security bulletin of the same date. No exploitation in the wild is mentioned.
Explicação gerada por IA a partir da matéria e dos artigos, em 29/10/2026 13:29.
Remediação
- Upgrade Axis Camera Station Pro to version 6.20 or later as described in the Axis security bulletin.
Linha do tempo
-
CERT-FR advisory CERTFR-2026-AVI-1408: data confidentiality flaw in Axis Camera Station Pro (CVE-2026-63286)
ler a análise desta fonte ocultar
CERT-FR published advisory CERTFR-2026-AVI-1408 on 28 October 2026 relaying an Axis security bulletin for CVE-2026-63286. The vulnerability affects Axis Camera Station Pro in versions prior to 6.20 and allows an attacker to cause a breach of data confidentiality. No details on exploitability, attack vector or in-the-wild activity are provided. Users are directed to the vendor bulletin for fixes.
Remediation
- Upgrade Axis Camera Station Pro to version 6.20 or later as described in the Axis security bulletin.