CVE-2026-63286

Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are still vulnerable. AXIS Camera Station Pro automatically creates one more such backup for recovery purpose when the update is applied. Delete all these backups and change the credentials stored in AXIS Camera Station Pro.

• CWE-326

• https://www.axis.com/dam/public/c9/5c/29/cve-2026-63286pdf-en-US-560650.pdf

Published

Oct 28, 2026

Last Modified

Oct 28, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-63277LibreOffice Calc can link a cell range to an external data s…8.5
• CVE-2026-63278URLs could be constructed which expanded environment variabl…6.7
• CVE-2026-63279LibreOffice can import PICT images, which may be embedded in…5.4
• CVE-2026-6328Improper input validation, Improper verification of cryptogr…8.3
• CVE-2026-63280Joomla Extension - regularlabs.com - Inconsistent CSRF token…8.8
• CVE-2026-63281Joomla Extension - regularlabs.com - XSS vulnerability in Re…4.8
• CVE-2026-6329PKCS#12 MAC verification uses an attacker-controlled compari…6.5
• CVE-2026-63292Stack-based buffer overflow in mod_vhost_alias in Apache Sof…7.5
• CVE-2026-63293A link following vulnerability in LXD allows an attacker to …9.9
• CVE-2026-63294A link following vulnerability in LXD allows an attacker to …9.9
• CVE-2026-63295An authorization bypass vulnerability in LXD allows an authe…4.3
• CVE-2026-63296An authorization bypass vulnerability in LXD allows an authe…9.9