Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2025-8998

It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and impact usability. This flaw can only be exploited after authe

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Axis

Description

It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and impact usability. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Axis Communications AB AXIS OS

Default version status: unaffected

  • 6.50.0 to < 6.50.5.22affected
  • 7.0.0 to < 8.40.90affected
  • 9.0.0 to < 9.80.124affected
  • 10.0.0 to < 10.12.306affected
  • 11.0.0 to < 11.11.178affected
  • 12.0.0 to < 12.7.27affected

References