Remote Code Execution Vulnerability in Axis Camera Station Pro and Axis Camera Station
A critical remote code execution (RCE) vulnerability, identified as CVE-2026-13312, has been discovered in Axis Camera Station pro versions prior to 6.17 and Axis Camera Station versions prior to 5.59 SR 2. This flaw allows an attacker to execute arbitrary code remotely on affected systems. Users are strongly advised to apply patches released by Axis as detailed in their security bulletin dated November 13, 2026. Immediate updating is necessary to mitigate exploitation risks. The vulnerability was officially disclosed by CERT-FR referencing Axis' security advisory and the CVE record.
Entenda a falha
A vulnerabilidade
CVE-2026-13312 is a critical remote code execution flaw in Axis Camera Station Pro (versions before 6.17) and Axis Camera Station (versions before 5.59 SR 2). According to CERT-FR, it lets an attacker execute arbitrary code remotely. The articles do not say what access, authentication or configuration is required. Fixes are in Axis Camera Station Pro 6.17 and Axis Camera Station 5.59 SR 2, per Axis' security bulletin of November 13, 2026.
Como foi descoberta
The articles do not say who found the flaw or how. It was disclosed on November 13, 2026 through an Axis security bulletin, which CERT-FR cites in its advisory CERTFR-2026-AVI-1534, along with the CVE record.
Explicação gerada por IA a partir da matéria e dos artigos, em 13/11/2026 12:19.
Linha do tempo
-
Remote Code Execution Vulnerability in Axis Camera Station Pro and Axis Camera Station
ler a análise desta fonte ocultar
A critical remote code execution (RCE) vulnerability, identified as CVE-2026-13312, has been discovered in Axis Camera Station pro versions prior to 6.17 and Axis Camera Station versions prior to 5.59 SR 2. This flaw allows an attacker to execute arbitrary code remotely on affected systems. Users are strongly advised to apply patches released by Axis as detailed in their security bulletin dated November 13, 2026. Immediate updating is necessary to mitigate exploitation risks. The vulnerability was officially disclosed by CERT-FR referencing Axis' security advisory and the CVE record.