Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Axis Communications AB | AXIS A1210 - Secure Entry | unaffected |
|
||||||
| Axis Communications AB | AXIS A1601 - Secure Entry | unaffected |
|
||||||
| Axis Communications AB | AXIS A1610 - Secure Entry | unaffected |
|
||||||
| Axis Communications AB | AXIS A1710 | unaffected |
|
||||||
| Axis Communications AB | AXIS A1810 - Secure Entry | unaffected |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Sun, 15 Nov 2026 07:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Authentication Bypass via WebSocket Endpoint in Axis Secure Entry Cameras |
Tue, 10 Nov 2026 05:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint. This bypasses the intended authentication layer. | |
| Weaknesses | CWE-306 | |
| References |
| |
| Metrics |
cvssV3_1
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: Axis
Published:
Updated: 2026-11-12T17:13:55.816Z
Reserved: 2026-07-16T08:28:41.293Z
Link: CVE-2026-63288
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-11-10T06:17:10.197
Modified: 2026-11-12T19:26:10.547
Link: CVE-2026-63288
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-11-15T07:30:08Z
-
CWE-306
Missing Authentication for Critical Function