Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,527All CVEsplus 18,890 rejected
- 423Last 24 hours3,033 in the last 7 days
- 17,423Last 30 days1,599 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 4 | 12 | 0 | 0 | 16 | 93 |
| 2025 | 2 | 5 | 27 | 2 | 0 | 36 | 77 |
| 2024 | 0 | 2 | 16 | 1 | 0 | 19 | 41 |
| 2023 | 1 | 12 | 3 | 0 | 0 | 16 | 22 |
| 2022 | 1 | 1 | 0 | 0 | 0 | 2 | 6 |
| 2021 | 0 | 2 | 2 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-63286 | Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are still vulnerable. AXIS Camera Station Pro…Axis Communications AB · AXIS Camera Station Pro | High7.1 |
| CVE-2026-4757 | A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be…Axis Communications AB · AXIS OS | High7.2 |
| CVE-2026-6505 | The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation. This vulnerability…Axis Communications AB · AXIS OS | Medium5.1 |
| CVE-2026-5304 | An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis…Axis Communications AB · AXIS OS | Medium5.7 |
| CVE-2026-5303 | The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation. This vulnerability…Axis Communications AB · AXIS OS | Medium5.7 |
| CVE-2026-8158 | The Signed Video Framework contained a buffer overflow issue which could lead the application using this framework to crash. The issue exclusively affects the…Axis Communications AB · Signed Video Framework | Medium5.3 |
| CVE-2026-6181 | The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after authenticating with a…Axis Communications AB · AXIS OS | Medium5.9 |
| CVE-2026-1185 | A configuration file on the local file system had improper input validation which could allow code execution and potentially lead to privilege escalation. This…Axis Communications AB · AXIS OS | Medium5.4 |
| CVE-2026-0804 | An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This…Axis Communications AB · AXIS OS | Medium6.7 |
| CVE-2026-0802 | An ACAP configuration file lacked sufficient input validation, which could allow command injection and potentially lead to privilege escalation. This…Axis Communications AB · AXIS OS | Medium6.0 |
| CVE-2026-0541 | ACAP applications can gain elevated privileges due to improper input validation during the installation process, potentially leading to privilege escalation.…Axis Communications AB · AXIS OS | Medium6.7 |
| CVE-2025-12063 | An insecure direct object reference allowed a non-admin user to modify or remove certain data objects without having the appropriate permissions.Axis Communications AB · AXIS Camera Station Pro | Medium5.7 |
| CVE-2025-12757 | An AXIS Camera Station Pro feature can be exploited in a way that allows a non-admin user to view information they are not permitted to.Axis Communications AB · AXIS Camera Station Pro | Medium4.6 |
| CVE-2025-13064 | A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script which is executed by the server. This…Axis Communications AB · AXIS Camera Station Pro | Medium4.5 |
| CVE-2025-11547 | AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server as a non-admin user.Axis Communications AB · AXIS Camera Station Pro | High7.8 |
| CVE-2025-11142 | The VAPIX API mediaclip.cgi that did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be exploited…Axis Communications AB · AXIS OS | High7.1 |
| CVE-2025-9055 | The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator-privileged user to gain Linux Root privileges. This flaw can…Axis Communications AB · AXIS OS | Medium6.4 |
| CVE-2025-8998 | It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and impact usability. This flaw can only be…Axis Communications AB · AXIS OS | Low3.1 |
| CVE-2025-9524 | The VAPIX API port.cgi did not have sufficient input validation, which may result in process crashes and impact usability. This vulnerability can only be…Axis Communications AB · AXIS OS | Medium4.3 |
| CVE-2025-10714 | AXIS Optimizer was vulnerable to an unquoted search path vulnerability, which could potentially lead to privilege escalation within Microsoft Windows operating…Axis Communications AB · AXIS Optimizer | High8.4 |
| CVE-2025-8108 | An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privilege escalation. This vulnerability can…Axis Communications AB · AXIS OS | Medium6.7 |
| CVE-2025-6779 | An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privilege escalation. This vulnerability can…Axis Communications AB · AXIS OS | Medium6.7 |
| CVE-2025-6571 | A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it.Axis Communications AB · AXIS OS | Medium6.0 |
| CVE-2025-5452 | A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to potential privilege…Axis Communications AB · AXIS OS | Medium6.6 |
| CVE-2025-6298 | ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege escalation. This vulnerability can only be…Axis Communications AB · AXIS OS | Medium6.7 |
| CVE-2025-5718 | The ACAP Application framework could allow privilege escalation through a symlink attack. This vulnerability can only be exploited if the Axis device is…Axis Communications AB · AXIS OS | Medium6.8 |
| CVE-2025-5454 | An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This…Axis Communications AB · AXIS OS | Medium6.4 |
| CVE-2025-4645 | An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the…Axis Communications AB · AXIS OS | Medium6.7 |
| CVE-2025-30027 | An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the…Axis Communications AB · AXIS OS | Medium6.7 |
| CVE-2025-3892 | ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis…Axis Communications AB · AXIS OS | Medium6.7 |
| CVE-2025-7622 | During an internal security assessment, a Server-Side Request Forgery (SSRF) vulnerability that allowed an authenticated attacker to access internal resources…Axis Communications AB · AXIS Camera Station Pro | Medium5.1 |
| CVE-2025-30026 | The AXIS Camera Station Server had a flaw that allowed to bypass authentication that is normally required.Axis Communications AB · AXIS Camera Station Pro | Medium5.3 |
| CVE-2025-30025 | The communication protocol used between the server process and the service control had a flaw that could lead to a local privilege escalation.Axis Communications AB · AXIS Device Manager | Medium4.8 |
| CVE-2025-30024 | The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack.Axis Communications AB · AXIS Device Manager | Medium6.8 |
| CVE-2025-30023 | The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack.Axis Communications AB · AXIS Camera Station Pro | Critical9.0 |
| CVE-2025-0358 | During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed…Axis Communications AB · AXIS OS | High8.8 |
| CVE-2025-0325 | A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour…Axis Communications AB · AXIS OS | Medium4.3 |
| CVE-2025-0324 | The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges.Axis Communications AB · AXIS OS | Critical9.4 |
| CVE-2025-0926 | Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for a non-admin user to remove system files causing a boot loop…Axis Communications AB · AXIS Camera Station Pro | Medium5.9 |
| CVE-2025-1056 | Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a specific file that the server is using. A non-admin user can…Axis Communications AB · AXIS Camera Station Pro | Medium6.1 |
| CVE-2025-0361 | During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the VAPIX Device Configuration framework that…Axis Communications AB · AXIS OS | Medium4.3 |
| CVE-2024-47261 | 51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did not have sufficient input validation to allow an…Axis Communications AB · AXIS OS | Medium4.3 |
| CVE-2025-0360 | During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that could…Axis Communications AB · AXIS OS | High7.8 |
| CVE-2025-0359 | During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the ACAP Application framework that allowed…Axis Communications AB · AXIS OS | High8.5 |
| CVE-2024-47262 | Dzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API param.cgi was vulnerable to a race condition attack allowing for an…Axis Communications AB · AXIS OS | Medium5.3 |
| CVE-2024-47260 | 51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API mediaclip.cgi did not have a sufficient input validation allowing for uploading…Axis Communications AB · AXIS OS | Medium6.5 |
| CVE-2024-47259 | Girishunawane, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi did not have a sufficient input validation allowing…Axis Communications AB · AXIS OS | Low3.5 |
| CVE-2024-47258 | 2N Access Commander version 2.1 and prior is vulnerable in default settings to Man In The Middle attack due to not verifying certificates of 2N edge devices.…2N · 2N Access Commander | High8.1 |
| CVE-2024-47256 | Successful exploitation of this vulnerability could allow an attacker (who needs to have Admin access privileges) to read hardcoded AES passphrase, which may…2N · 2N Access Commander | Medium6.0 |
| CVE-2024-13417 | Specifically crafted payloads sent to the RFID reader could cause DoS of RFID reader. After the device is restarted, it gets back to fully working state. 2N…2N · 2N OS | Medium4.6 |