CVE Vulnerabilities

CVE-2025-30026

Authentication Bypass Using an Alternate Path or Channel

Published: Jul 11, 2025 | Modified: Jan 16, 2026
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

The AXIS Camera Station Server had a flaw that allowed to bypass authentication that is normally required.

Weakness

The product requires authentication, but the product has an alternate path or channel that does not require authentication.

Affected Software

NameVendorStart VersionEnd Version
Camera_stationAxis*5.58.47195 (excluding)
Camera_station_proAxis6.0.25729 (including)6.9.47069 (excluding)

Potential Mitigations

References