https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T07:55:36.253600+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2024-avi-1035 certfr-2024-avi-1035 — De multiples vulnérabilités ont été découvertes dans les produits Axis. Certaines d'entre elles permettent à un attaqua… 2026-10-06T07:55:36.301114+00:00 certfr-2024-avi-1035 https://cve.radiocsirt.org/vuln/euvd-2026-225931 EUVD-2026-225931 2026-10-06T07:55:36.301157+00:00 EUVD-2026-225931 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8160 fkie_cve-2024-8160 2026-10-06T07:55:36.301172+00:00

Erik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi did not have a sufficient input validation allowing for a possible command injection leading to being able to transfer files from/to the Axis device. This flaw can only be exploited after authenticating with an administrator-privileged service account. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

 https://cve.radiocsirt.org/vuln/ghsa-qj8p-c5h3-g242 GHSA-qj8p-c5h3-g242 2026-10-06T07:55:36.301203+00:00

Erik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi did not have a sufficient input validation allowing for a possible command injection leading to being able to transfer files from/to the Axis device. This flaw can only be exploited after authenticating with an administrator-privileged service account. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.