CVE record · 1 source
CVE-2026-63288
CVSS 8.3A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint.
- Vendor
- Axis Communications
- Product
- AXIS A1210 - Secure Entry, AXIS A1601 - Secure Entry, AXIS A1610 - Secure Entry, AXIS A1710
- CVSS v3.1
- 8.3 AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
- Weakness
- CWE-306
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint.
A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint. This bypasses the intended authentication layer.