Axis Axis OS

Name: Axis Axis OS
Brand: Axis

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical7high5medium0low

updated 2026-10-28

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-0324US	high8.8	0.41% (35th)	Exploit	LTS 6.50.5.21	2025-06-02	9 versions
CVE-2025-6779US	—	1.05% (64th)	—	no fix	2025-11-11	≤ Active Track <12.6.40
CVE-2024-47259US	high7.1	0.53% (45th)	—	no fix	2025-03-04	3 versions
CVE-2024-47260US	—	0.41% (35th)	—	no fix	2025-03-04	7 versions
CVE-2026-0802US	high7.3	0.40% (34th)	—	Active Track 12.9.32	2026-05-12	3 versions
CVE-2025-0325US	—	0.39% (33rd)	—	LTS 2020 9.80.100	2025-06-02	9 versions
CVE-2025-5718US	—	0.38% (32nd)	—	no fix	2025-11-11	≤ Active Track <12.6.30
CVE-2024-47261US	medium4.3	0.38% (32nd)	—	no fix	2025-04-08	3 versions
CVE-2024-47262US	—	0.36% (30th)	—	no fix	2025-03-04	11 versions
CVE-2025-0361US	medium5.3	0.33% (26th)	—	12.3.56	2025-04-08	2 versions
CVE-2025-5452US	medium6.6	0.31% (24th)	—	no fix	2025-11-11	≤ Active Track <12.6.69
CVE-2025-9524US	—	0.27% (19th)	—	no fix	2025-11-11	6 versions
CVE-2025-0358US	high8.8	0.25% (16th)	—	LTS 2024 11.11.140	2025-06-02	9 versions
CVE-2025-8998US	—	0.24% (15th)	—	no fix	2025-11-11	6 versions
CVE-2026-1185US	high8.8	0.23% (13th)	—	Active Track 12.10.4	2026-05-12	3 versions
CVE-2025-5454US	medium6.7	0.16% (6th)	—	no fix	2025-11-11	≤ Active Track <12.6.18
CVE-2025-4645US	—	0.16% (5th)	—	no fix	2025-11-11	≤ Active Track <12.6.7
CVE-2025-30027US	—	0.16% (5th)	—	no fix	2025-08-12	2 versions
CVE-2025-6298US	—	0.15% (4th)	—	no fix	2025-11-11	≤ Active Track <12.6.28
CVE-2025-3892US	—	0.15% (4th)	—	no fix	2025-08-12	≤ Active Track <12.5.31
CVE-2025-0360US	—OT elevated	0.14% (4th)	—	no fix	2025-03-04	4 versions
CVE-2025-0359US	medium5.5OT elevated	0.14% (3rd)	—	no fix	2025-03-04	5 versions
CVE-2025-8108US	—	0.14% (3rd)	—	no fix	2025-11-11	≤ Active Track <12.7.33
CVE-2026-0804US	high7.3	0.13% (2nd)	—	Active Track 12.10.4	2026-05-12	3 versions
CVE-2025-9055US	—	0.12% (2nd)	—	no fix	2025-11-11	≤ Active Track <12.7.31
CVE-2025-6571US	—	0.11% (2nd)	—	no fix	2025-11-11	2 versions
CVE-2026-0541US	high7.3	0.10% (1st)	—	Active Track 12.10.4	2026-05-12	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-1287Improper Validation of Specified Type of Input9 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource4 CVEs
CWE-250Execution with Unnecessary Privileges2 CVEs
CWE-35Path Traversal: '.../...//'2 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-203Observable Discrepancy1 CVEs
CWE-214Invocation of Process Using Visible Sensitive Information1 CVEs
CWE-269Improper Privilege Management1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan