CVE-2024-6749

Seth Fogie, member of the AXIS Camera Station Pro Bug Bounty Program, has found that the Incident report feature may expose sensitive credentials on the AXIS Camera Station windows client. If Incident report is not being used with credentials configured this flaw does not apply. Axis has released patched versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

• CWE-522

• https://www.axis.com/dam/public/e6/e8/1e/cve-2024-6749-en-US-455106.pdf

Published

Nov 26, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-6743AguardNet's Space Management System does not properly valida…9.8
• CVE-2024-6744The SMTP Listener of Secure Email Gateway from Cellopoint do…9.8
• CVE-2024-6745A vulnerability classified as critical has been found in cod…9.8
• CVE-2024-6746A vulnerability classified as problematic was found in Naibo…8.8
• CVE-2024-6747Information leakage in mknotifyd in Checkmk before 2.3.0p18,…7.5
• CVE-2024-6748Zohocorp ManageEngine OpManager, OpManager Plus, OpManager M…8.3
• CVE-2024-6750The Social Auto Poster plugin for WordPress is vulnerable to…7.5
• CVE-2024-6751The Social Auto Poster plugin for WordPress is vulnerable to…6.5
• CVE-2024-6752The Social Auto Poster plugin for WordPress is vulnerable to…5.4
• CVE-2024-6753The Social Auto Poster plugin for WordPress is vulnerable to…6.1
• CVE-2024-6754The Social Auto Poster plugin for WordPress is vulnerable to…4.3
• CVE-2024-6755The Social Auto Poster plugin for WordPress is vulnerable to…5.3