Axis Communications AB AXIS OS

Name: Axis Communications AB AXIS OS
Brand: Axis Communications AB

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical17high10medium1low

updated 2026-10-28

vulnerabilities (56)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-11142US	high8.8	0.57% (47th)	Exploit	no fix	2026-02-10	≤ 12.6.54 ≤12.7.35
CVE-2025-0324US	high8.8	0.41% (35th)	Exploit	12.3.33	2025-06-02	2 versions
CVE-2023-21413US	high7.2	1.47% (74th)	—	no fix	2023-10-16	≤ AXIS OS 10.5 – 11.5
CVE-2025-6779US	—	1.05% (64th)	—	12.6.40	2025-11-11	12.0.0 → 12.6.40
CVE-2021-31988US	high8.8	0.95% (61st)	—	no fix	2021-10-05	≤ AXIS OS 5.51 or later
CVE-2021-31987US	high7.5	0.89% (59th)	—	no fix	2021-10-05	≤ AXIS OS 5.51 or later
CVE-2021-31986US	medium6.8	0.80% (57th)	—	no fix	2021-10-05	≤ AXIS OS 6.40 or later
CVE-2023-21415US	high8.1	0.71% (53rd)	—	no fix	2023-10-16	≤ AXIS OS 6.50 – 11.5
CVE-2023-5800US	high8.8	0.68% (52nd)	—	no fix	2024-02-05	≤ AXIS OS 11.8, 10.12, 9.80, 8.40, 6.50
CVE-2023-21418US	high7.1	0.67% (52nd)	—	no fix	2023-11-21	≤ AXIS OS 6.50 – 11.6
CVE-2023-21417US	high7.1	0.67% (52nd)	—	no fix	2023-11-21	≤ AXIS OS 8.50 – 11.6
CVE-2023-21416US	medium6.5	0.67% (52nd)	—	no fix	2023-11-21	≤ AXIS OS 10.7 – 11.6
CVE-2024-8160US	low2.7	0.64% (50th)	—	12.1.21	2024-11-26	3 versions
CVE-2024-0055US	—	0.60% (49th)	—	no fix	2024-03-19	≤ AXIS OS 10.12 - 11.8
CVE-2024-0054US	—	0.58% (47th)	—	no fix	2024-03-19	≤ AXIS OS 6.50 - 11.8
CVE-2026-4757US	—	0.57% (47th)	—	12.11.44	2026-08-11	12.0.0 → 12.11.44
CVE-2023-5677US	high8.8	0.56% (47th)	—	no fix	2024-02-05	2 versions
CVE-2024-47259US	high7.1	0.53% (45th)	—	12.2.52	2025-03-04	3 versions
CVE-2024-8772US	—	0.44% (38th)	—	10.12.259	2024-11-26	5 versions
CVE-2024-47260US	—	0.41% (35th)	—	10.12.270	2025-03-04	5 versions
CVE-2026-0802US	high7.3	0.40% (34th)	—	12.9.33	2026-05-12	12.0.0 → 12.9.33
CVE-2024-6509US	—	0.40% (34th)	—	6.50.5.19	2024-09-10	6 versions
CVE-2024-6173US	—	0.40% (34th)	—	no fix	2024-09-10	≤ 6.50 - 11.10
CVE-2026-6181US	—	0.39% (33rd)	—	12.11.13	2026-08-11	2 versions
CVE-2025-0325US	—	0.39% (33rd)	—	9.80.100	2025-06-02	6 versions
CVE-2024-0067US	—	0.38% (32nd)	—	no fix	2024-09-10	≤ 8.40 - 11.10
CVE-2025-5718US	—	0.38% (32nd)	—	12.6.30	2025-11-11	12.0.0 → 12.6.30
CVE-2024-47261US	medium4.3	0.38% (32nd)	—	11.11.141	2025-04-08	3 versions
CVE-2024-47262US	—	0.36% (30th)	—	11.11.127	2025-03-04	7 versions
CVE-2023-5553US	medium6.8OT elevated	0.33% (26th)	—	no fix	2023-11-21	≤ AXIS OS 10.8 - 11.6
CVE-2025-0361US	medium5.3	0.33% (26th)	—	12.3.56	2025-04-08	2 versions
CVE-2025-5452US	medium6.6	0.31% (24th)	—	12.6.69	2025-11-11	12.0.0 → 12.6.69
CVE-2026-5304US	—	0.31% (24th)	—	12.11.12	2026-08-11	12.0.0 → 12.11.12
CVE-2024-6979US	high7.5OT elevated	0.30% (23rd)	—	11.11.94	2024-09-10	2 versions
CVE-2023-21404US	medium5.3OT elevated	0.28% (21st)	—	no fix	2023-05-08	≤ AXIS OS 11.0.X - 11.3.x
CVE-2025-9524US	—	0.27% (19th)	—	6.50.5.21	2025-11-11	6 versions
CVE-2023-21414US	medium6.8	0.26% (18th)	—	no fix	2023-10-16	≤ AXIS OS 10.11 - 11.5
CVE-2025-0358US	high8.8	0.25% (16th)	—	12.4.0	2025-06-02	12.0.0 → 12.4.0
CVE-2025-8998US	—	0.24% (15th)	—	6.50.5.22	2025-11-11	6 versions
CVE-2024-7784US	—	0.24% (15th)	—	11.11.85	2024-09-10	12 versions
CVE-2026-5303US	—	0.23% (13th)	—	12.11.31	2026-08-11	12.0.0 → 12.11.31
CVE-2026-1185US	high8.8	0.23% (13th)	—	12.10.36	2026-05-12	12.0.0 → 12.10.36
CVE-2024-0066US	—OT elevated	0.21% (11th)	—	no fix	2024-06-18	≤ AXIS OS 5.51 -11.9
CVE-2025-5454US	medium6.7	0.16% (6th)	—	12.6.18	2025-11-11	12.0.0 → 12.6.18
CVE-2025-4645US	—	0.16% (5th)	—	12.6.7	2025-11-11	12.0.0. → 12.6.7
CVE-2025-30027US	—	0.16% (5th)	—	12.3.36	2025-08-12	12.0.0 → 12.3.36
CVE-2025-6298US	—	0.15% (4th)	—	12.6.28	2025-11-11	12.0.0 → 12.6.28
CVE-2025-3892US	—	0.15% (4th)	—	12.5.31	2025-08-12	12.0.0 → 12.5.31
CVE-2025-0360US	—OT elevated	0.14% (4th)	—	11.11.135	2025-03-04	3 versions
CVE-2025-0359US	medium5.5OT elevated	0.14% (3rd)	—	11.11.135	2025-03-04	3 versions

showing 50 of 56

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-1287Improper Validation of Specified Type of Input10 CVEs
CWE-35Path Traversal: '.../...//'8 CVEs
CWE-1286Improper Validation of Syntactic Correctness of Input5 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource5 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-863Incorrect Authorization4 CVEs
CWE-155Improper Neutralization of Wildcards or Matching Symbols3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)56 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan