PT-2026-39941 · Axis Communications · Axis

Cookiejack15 · Published 2026-05-12 · Updated 2026-05-19 · CVE-2026-1185

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Axis (affected versions not specified)

Description Improper input validation in a configuration file on the local file system could allow code execution and potentially lead to privilege escalation. This issue can only be exploited if an attacker has SSH access to the Axis device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2026-1185

Affected Products

Axis

References · 5

• https://axis.com/dam/public/69/df/8d/cve-2026-1185pdf-en-US-530733.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-1185 · Security Note
• https://t.me/CVEtracker/53467 · Telegram Post
• https://t.me/cveNotify/164040 · Telegram Post
• https://t.me/cveNotify/163179 · Telegram Post