CVE-2026-63287

CVSS 6.5 (medium) · published 2026-11-10

It was possible for an authenticated non-admin user to modify certain data objects without having the appropriate permissions, which could be used to tamper with audit log creation in AXIS Camera Station.

Weakness: CWE-117, CWE-863

Source: NVD CVE-2026-63287

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.