Axis Camera Station vulnerabilities

3 CVEs affecting Axis Camera Station, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-7622, published 2025-08-12.

More from Axis.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-30026, published 2025-07-11. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. The AXIS Camera Station Server had a flaw that allowed to bypass authentication that is normally required.
• CVE-2025-30023, published 2025-07-11. Critical severity, CVSS 9.0. EPSS: 0.6% chance of exploitation in the next 30 days. The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack.
• CVE-2025-7622, published 2025-08-12. Medium severity, CVSS 5.7. EPSS: 0.2% chance of exploitation in the next 30 days. During an internal security assessment, a Server-Side Request Forgery (SSRF) vulnerability that allowed an authenticated attacker to access internal resources on the server was discovered.