CVE-2025-1056

Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a specific file that the server is using. A non-admin user can modify this file to either create files or change the content of files in an admin-protected location. Axis has released a patched version for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

• CWE-73

• https://www.axis.com/dam/public/e4/2e/b2/cve-2025-1056pdf-en-US-479106.pdfVendor Advisory

Published

Apr 23, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-10554A stored Cross-site Scripting (XSS) vulnerability affecting …5.4
• CVE-2025-10555A stored Cross-site Scripting (XSS) vulnerability affecting …8.7
• CVE-2025-10556A stored Cross-site Scripting (XSS) vulnerability affecting …5.4
• CVE-2025-10557A stored Cross-site Scripting (XSS) vulnerability affecting …5.4
• CVE-2025-10558A stored Cross-site Scripting (XSS) vulnerability affecting …6.1
• CVE-2025-10559A Path Traversal vulnerability affecting Factory Resource Ma…9.1
• CVE-2025-10560Worksnaps before version 1.6.20260201 contains hardcoded clo…9.3
• CVE-2025-10561Rejected reason: This CVE ID was assigned in error. The End…
• CVE-2025-10562A flaw has been found in Campcodes Grocery Sales and Invento…9.8
• CVE-2025-10563A vulnerability has been found in Campcodes Grocery Sales an…9.8
• CVE-2025-10564A vulnerability was found in Campcodes Grocery Sales and Inv…9.8
• CVE-2025-10565A vulnerability was determined in Campcodes Grocery Sales an…9.8