Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-11142

The VAPIX API mediaclip.cgi that did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be exploited after authenticating with

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Axis

Description

The VAPIX API mediaclip.cgi that did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be exploited after authenticating with an operator- or administrator- privileged service account.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Axis Communications AB AXIS OS

Default version status: unaffected

  • 12.6.54 to ≤ 12.7.35affected

References