CVE-2026-6181: Axis Communications Ab Axis OS

Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after authenticating with a viewer-privileged service account.

Affected products

• Axis Communications Ab Axis OS: from 12.0.0, before 12.11.13 (fixed in 12.11.13); from 11.11.0, before 11.11.207 (fixed in 11.11.207)

Published 2026-08-11. Last modified 2026-09-03.