CVE-2025-5454
Axis Communications
- Published
- 11 November 2025
- Last modified
- 17 June 2026
- CVSS
- 6.7 v3.1
- Severity
- medium
- EPSS
- 0.2% (5th pct)
- CISA KEV
- Not listed
- NVD status
- Analyzed
- Weaknesses
- CWE-35
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
Exploitation
Not listed in the CISA Known Exploited Vulnerabilities catalogue as of 2026.09.04. That is an absence of confirmed public exploitation, not evidence that exploitation has not occurred. EPSS models a 0.2% probability of exploitation activity in the next 30 days.
Affected products
| Product | Vendor | Type | Versions named |
|---|---|---|---|
| A1210 (-B) | Axis Communications | unknown | <= 11.6.16.0, >= 11.0 |
| A1214 | Axis Communications | unknown | — |
| A1601 | Axis Communications | unknown | <= 1.84.4, <= 10.12.171.0, <= 11.6.16.0, >= 10.0 +1 |
| A1610 (-B) | Axis Communications | unknown | <= 10.12.171.0, <= 11.6.16.0, >= 11.0 |
| A1710-B | Axis Communications | unknown | — |
| A1810-B | Axis Communications | unknown | — |
| A8207-VE MK II | Axis Communications | unknown | — |
| Axis Os | Axis Communications | unknown | < 10.12.199, < 10.12.206, < 10.7, < 10.8 +41 |
| C1110-E | Axis Communications | unknown | — |
| C1111-E | Axis Communications | unknown | — |
| C1210-E | Axis Communications | unknown | — |
| C1211-E | Axis Communications | unknown | — |
| C1310-E MK II | Axis Communications | unknown | — |
| C1410 MK II | Axis Communications | unknown | — |
| C1510 | Axis Communications | unknown | — |
| C1511 | Axis Communications | unknown | — |
| C1610-VE | Axis Communications | unknown | — |
| C1710 | Axis Communications | unknown | — |
| C1720 | Axis Communications | unknown | — |
| C6110 | Axis Communications | unknown | — |
| C8110 | Axis Communications | unknown | — |
| C8210 | Axis Communications | unknown | — |
| D1110 | Axis Communications | unknown | — |
| D201-S XPT Q6075 | Axis Communications | unknown | — |
| D2110-VE | Axis Communications | unknown | — |
| D2210-VE | Axis Communications | unknown | — |
| D3110 MK II | Axis Communications | unknown | — |
| D4100-VE MK II | Axis Communications | unknown | — |
| D4200-VE | Axis Communications | unknown | — |
| D6310 | Axis Communications | unknown | — |
| Excam Xf Q1785 | Axis Communications | unknown | — |
| Excam Xpt Q6075 | Axis Communications | unknown | — |
| F9104-B MAIN UNIT | Axis Communications | unknown | — |
| F9104-B MK II MAIN UNIT | Axis Communications | unknown | — |
| F9111-R MK II MAIN UNIT | Axis Communications | unknown | — |
| F9111 MAIN UNIT | Axis Communications | unknown | — |
| F9111 MK II MAIN UNIT | Axis Communications | unknown | — |
| F9114-B-R MK II MAIN UNIT | Axis Communications | unknown | — |
| F9114-B MAIN UNIT | Axis Communications | unknown | — |
| F9114-BT | Axis Communications | unknown | — |
| F9114 MAIN UNIT | Axis Communications | unknown | — |
| FA51 | Axis Communications | unknown | — |
| FA51-B | Axis Communications | unknown | — |
| FA54 | Axis Communications | unknown | — |
| I7010-SAFETY | Axis Communications | unknown | — |
| I7010-VE | Axis Communications | unknown | — |
| I7020 | Axis Communications | unknown | — |
| I8016-LVE | Axis Communications | unknown | — |
| I8116-E | Axis Communications | unknown | — |
| I8307-VE | Axis Communications | unknown | — |
| M1055-L | Axis Communications | unknown | — |
| M1075-L | Axis Communications | unknown | — |
| M1135 | Axis Communications | unknown | — |
| M1135-E MK II | Axis Communications | unknown | — |
| M1137 | Axis Communications | unknown | — |
| M1137-E MK II | Axis Communications | unknown | — |
| M2035-LE | Axis Communications | unknown | — |
| M2036-LE | Axis Communications | unknown | — |
| M3057-PLR MK II | Axis Communications | unknown | — |
| M3085-V | Axis Communications | unknown | — |
| M3086-V | Axis Communications | unknown | — |
| M3086-V MIC | Axis Communications | unknown | — |
| M3088-V | Axis Communications | unknown | — |
| M3125-LVE | Axis Communications | unknown | — |
| M3126-LVE | Axis Communications | unknown | — |
| M3128-LVE | Axis Communications | unknown | — |
| M3215-LVE | Axis Communications | unknown | — |
| M3216-LVE | Axis Communications | unknown | — |
| M3905-R | Axis Communications | unknown | — |
| M4215-LV | Axis Communications | unknown | — |
| M4215-V | Axis Communications | unknown | — |
| M4216-LV | Axis Communications | unknown | — |
| M4216-V | Axis Communications | unknown | — |
| M4218-LV | Axis Communications | unknown | — |
| M4218-V | Axis Communications | unknown | — |
| M4225-LVE | Axis Communications | unknown | — |
| M4227-LVE | Axis Communications | unknown | — |
| M4228-LVE | Axis Communications | unknown | — |
| M4308-PLE | Axis Communications | unknown | — |
| M4317-PLR | Axis Communications | unknown | — |
| M4317-PLVE | Axis Communications | unknown | — |
| M4318-PLR | Axis Communications | unknown | — |
| M4318-PLVE | Axis Communications | unknown | — |
| M4327-P | Axis Communications | unknown | — |
| M4328-P | Axis Communications | unknown | — |
| M5000 | Axis Communications | unknown | — |
| M5000-G | Axis Communications | unknown | — |
| M5074 | Axis Communications | unknown | — |
| M5075 | Axis Communications | unknown | — |
| M5075-G | Axis Communications | unknown | — |
| M5526-E | Axis Communications | unknown | — |
| M7104 | Axis Communications | unknown | — |
| M7116 | Axis Communications | unknown | — |
| P1245 MK II | Axis Communications | unknown | — |
| P1265 MK II | Axis Communications | unknown | — |
| P1275 MK II | Axis Communications | unknown | — |
| P1385 | Axis Communications | unknown | — |
| P1385-B | Axis Communications | unknown | — |
| P1385-BE | Axis Communications | unknown | — |
| P1385-E | Axis Communications | unknown | — |
| P1387 | Axis Communications | unknown | — |
| P1387-B | Axis Communications | unknown | — |
| P1387-BE | Axis Communications | unknown | — |
| P1387-LE | Axis Communications | unknown | — |
| P1388 | Axis Communications | unknown | — |
| P1388-B | Axis Communications | unknown | — |
| P1388-BE | Axis Communications | unknown | — |
| P1388-LE | Axis Communications | unknown | — |
| P1465-LE | Axis Communications | unknown | — |
| P1465-LE-3 | Axis Communications | unknown | — |
| P1467-LE | Axis Communications | unknown | — |
| P1468-LE | Axis Communications | unknown | — |
| P1468-XLE | Axis Communications | unknown | — |
| P1475-LE | Axis Communications | unknown | — |
| P1518-E | Axis Communications | unknown | — |
| P1518-LE | Axis Communications | unknown | — |
| P3265-LV | Axis Communications | unknown | — |
| P3265-LVE | Axis Communications | unknown | — |
| P3265-LVE-3 | Axis Communications | unknown | — |
| P3265-V | Axis Communications | unknown | — |
| P3267-LV | Axis Communications | unknown | — |
| P3267-LVE | Axis Communications | unknown | — |
| P3267-LVE MIC | Axis Communications | unknown | — |
| P3268-LV | Axis Communications | unknown | — |
| P3268-LVE | Axis Communications | unknown | — |
| P3268-SLVE | Axis Communications | unknown | — |
| P3275-LV | Axis Communications | unknown | — |
| P3275-LVE | Axis Communications | unknown | — |
| P3277-LV | Axis Communications | unknown | — |
| P3277-LVE | Axis Communications | unknown | — |
| P3278-LV | Axis Communications | unknown | — |
| P3278-LVE | Axis Communications | unknown | — |
| P3285-LV | Axis Communications | unknown | — |
| P3285-LVE | Axis Communications | unknown | — |
| P3287-LV | Axis Communications | unknown | — |
| P3287-LVE | Axis Communications | unknown | — |
| P3288-LV | Axis Communications | unknown | — |
| P3288-LVE | Axis Communications | unknown | — |
| P3735-PLE | Axis Communications | unknown | — |
| P3737-PLE | Axis Communications | unknown | — |
| P3738-PLE | Axis Communications | unknown | — |
| P3747-PLVE | Axis Communications | unknown | — |
| P3748-PLVE | Axis Communications | unknown | — |
| P3818-PVE | Axis Communications | unknown | — |
| P3827-PVE | Axis Communications | unknown | — |
| P3905-R MK III | Axis Communications | unknown | — |
| P3925-LRE | Axis Communications | unknown | — |
| P3925-R | Axis Communications | unknown | — |
| P3935-LR | Axis Communications | unknown | — |
| P4705-PLVE | Axis Communications | unknown | — |
| P4707-PLVE | Axis Communications | unknown | — |
| P4708-PLVE | Axis Communications | unknown | — |
| P5654-E | Axis Communications | unknown | — |
| P5654-E MK II | Axis Communications | unknown | — |
| P5655-E | Axis Communications | unknown | — |
| P5676-LE | Axis Communications | unknown | — |
| P7304 | Axis Communications | unknown | — |
| P7316 | Axis Communications | unknown | — |
| P9117-PV | Axis Communications | unknown | — |
| Q1615-LE MK III | Axis Communications | unknown | — |
| Q1615 MK III | Axis Communications | unknown | — |
| Q1656 | Axis Communications | unknown | — |
| Q1656-B | Axis Communications | unknown | — |
| Q1656-BE | Axis Communications | unknown | — |
| Q1656-BLE | Axis Communications | unknown | — |
| Q1656-DLE | Axis Communications | unknown | — |
| Q1656-LE | Axis Communications | unknown | — |
| Q1686-DLE | Axis Communications | unknown | — |
| Q1715 | Axis Communications | unknown | — |
| Q1728 | Axis Communications | unknown | — |
| Q1728-LE | Axis Communications | unknown | — |
| Q1798-LE | Axis Communications | unknown | — |
| Q1800-LE | Axis Communications | unknown | — |
| Q1800-LE-3 | Axis Communications | unknown | — |
| Q1805-LE | Axis Communications | unknown | — |
| Q1806-LE | Axis Communications | unknown | — |
| Q1808-LE | Axis Communications | unknown | — |
| Q1809-LE | Axis Communications | unknown | — |
| Q1961-TE | Axis Communications | unknown | — |
| Q1961-XTE | Axis Communications | unknown | — |
| Q1971-E | Axis Communications | unknown | — |
| Q1972-E | Axis Communications | unknown | — |
| Q2101-TE | Axis Communications | unknown | — |
| Q2111-E | Axis Communications | unknown | — |
| Q2112-E | Axis Communications | unknown | — |
| Q3536-LVE | Axis Communications | unknown | — |
| Q3538-LVE | Axis Communications | unknown | — |
| Q3538-SLVE | Axis Communications | unknown | — |
| Q3546-LVE | Axis Communications | unknown | — |
| Q3548-LVE | Axis Communications | unknown | — |
| Q3556-LVE | Axis Communications | unknown | — |
| Q3558-LVE | Axis Communications | unknown | — |
| Q3626-VE | Axis Communications | unknown | — |
| Q3628-VE | Axis Communications | unknown | — |
| Q3819-PVE | Axis Communications | unknown | — |
| Q3839-PVE | Axis Communications | unknown | — |
| Q3839-SPVE | Axis Communications | unknown | — |
| Q4809-PVE | Axis Communications | unknown | — |
| Q6020-E | Axis Communications | unknown | — |
| Q6074 | Axis Communications | unknown | — |
| Q6074-E | Axis Communications | unknown | — |
| Q6075 | Axis Communications | unknown | — |
| Q6075-E | Axis Communications | unknown | — |
| Q6075-S | Axis Communications | unknown | — |
| Q6075-SE | Axis Communications | unknown | — |
| Q6078-E | Axis Communications | unknown | — |
| Q6135-LE | Axis Communications | unknown | — |
| Q6225-LE | Axis Communications | unknown | — |
| Q6300-E | Axis Communications | unknown | — |
| Q6315-LE | Axis Communications | unknown | — |
| Q6318-LE | Axis Communications | unknown | — |
| Q6355-LE | Axis Communications | unknown | — |
| Q6358-LE | Axis Communications | unknown | — |
| Q8615-E | Axis Communications | unknown | — |
| Q8752-E | Axis Communications | unknown | — |
| Q8752-E MK II | Axis Communications | unknown | — |
| Q9307-LV | Axis Communications | unknown | — |
| S3008 | Axis Communications | unknown | — |
| S3008 MK II | Axis Communications | unknown | — |
| S3016 | Axis Communications | unknown | — |
| S4000 | Axis Communications | unknown | — |
| V5925 | Axis Communications | unknown | — |
| V5938 | Axis Communications | unknown | — |
| W100 | Axis Communications | unknown | — |
| W101 | Axis Communications | unknown | — |
| W102 | Axis Communications | unknown | — |
| W110 | Axis Communications | unknown | — |
| W120 | Axis Communications | unknown | — |
| W401 | Axis Communications | unknown | — |
| XC1311 | Axis Communications | unknown | — |
| XF40-Q1785 | Axis Communications | unknown | — |
| XFQ1656 | Axis Communications | unknown | — |
| XPQ1785 | Axis Communications | unknown | — |
References
Vendor advisory and patch
Record assembled from NVD, CISA KEV 2026.09.04 and FIRST EPSS 2026-09-04. Affected products are those NVD's CPE configuration names that fall inside this site's scope; a CVE may affect products outside it.