CVE-2021-31986: Axis OS

Medium severity, CVSS 6.8. EPSS: 0.8% chance of exploitation in the next 30 days.

User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage.

Affected products

• Axis Axis OS: before 10.7 (fixed in 10.7)
• Axis Axis OS 2016: before 6.50.5.5 (fixed in 6.50.5.5)
• Axis Axis OS 2018: before 8.40.4.3 (fixed in 8.40.4.3)
• Axis Axis OS 2020: before 9.80.3.5 (fixed in 9.80.3.5)

Published 2021-10-05. Last modified 2026-06-17.