CVE-2025-30026: Authentication Bypass in AXIS Camera Station

Authentication bypass on AXIS Camera Station (CVSS 9.8). Critical flaw. Active exploitation in real attack chains.

CVE-2025-30026 is an authentication bypass vulnerability in AXIS Camera Station Server. The vulnerability allows attackers to circumvent access controls that are normally required, compromising the security of the surveillance system. This flaw affects critical software used by numerous organizations to centrally manage surveillance cameras.

The vulnerability is rated critical with CVSS 9.8. Published on 2025-07-11, recent signals on X show concrete exploitation: researchers have reported using the flaw in exploit chains during real penetration tests, chaining it with other vulnerabilities to obtain system-level access. Technical data in official databases remains limited in detailed specifications.

Administrators must immediately verify AXIS Camera Station installations in their infrastructure, consult official AXIS channels for patches and security advisories, and implement patches when available. It is recommended to strengthen access monitoring and review authentication logs for exploitation attempts. Pending official patches, consider network access controls and segmentation strategies.

At a glance

What: Authentication bypass in AXIS Camera Station Server. Enables unauthorized access to the surveillance system.
Severity: CVSS 9.8 (critical). Flaw verified from official NVD source.
Affected versions: Not reported in official NVD description.
Fix: Not reported in available official data.
Status: Published on NVD on 2025-07-11. Signals of active exploitation in penetration testing reported on X on 2026-10-31.
Action: Verify AXIS Camera Station installations in production. Consult official AXIS advisories. Implement security patches when available. Monitor logs for unauthorized access.

Sources: NVD, CVE-2025-30026

← All articles