Database backups are vulnerable to offline attacks.
Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are still vulnerable. AXIS Camera Station Pro automatically creates one more such backup for recovery purpose when the update is applied. Delete all these backups and change the credentials stored in AXIS Camera Station Pro.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Axis Communications
- Product
- AXIS Camera Station Pro, AXIS Camera Station 5
- CVSS v3.1
- 7.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- Weakness
- CWE-326
- Exposure class
- OT / ICS
- NVD status
- Received
Why it ranks 15 (Routine)
- CVSS v3.1 7.1 high
- Product class: OT / ICS
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-63286 on this site · NVD · CVE.org · Vulnpedia