CVE-2025-9055: Axis Communications Ab Axis OS

Medium severity, CVSS 6.4. EPSS: 0.1% chance of exploitation in the next 30 days.

The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator-privileged user to gain Linux Root privileges. This flaw can only be exploited after authenticating with an administrator-privileged service account.

Affected products

• Axis Communications Ab Axis OS: from 12.0.0, before 12.7.31 (fixed in 12.7.31)

Published 2025-11-11. Last modified 2026-06-17.