CVE-2026-8372

{
  "etk_id": "ETK-2026-4029",
  "cve_id": "CVE-2026-8372",
  "display_id": "CVE-2026-8372",
  "ghsa_id": "GHSA-p43j-wrmf-984c",
  "euvd_id": "EUVD-2026-120777",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthorized access vulnerability in AXIS Camera Station Pro",
  "summary": "AXIS Camera Station Pro versions before 6.18 contain an issue that could permit unauthorized access. The available evidence does not identify the affected function or the conditions an attacker must meet.",
  "mitigation": "Update AXIS Camera Station Pro to version 6.18. Until the update is deployed, limit access to the Camera Station Pro environment to trusted users and networks.",
  "vendor": "Axis Communications AB",
  "product": "AXIS Camera Station Pro",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 6.13, < 6.18"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "6.18"
      ],
      "package_name": "AXIS Camera Station Pro",
      "purl": null
    }
  ],
  "cwes": [
    306
  ],
  "cvss_score": 8.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 27.207471883333334,
  "t0_at": "2026-11-10T05:36:58.926000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-10T05:36:58.926000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-10T05:36:58.926000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8372"
    }
  }
}