Axis Communications AB AXIS OS up to 12.10.35 Configuration File permission assignment

Summaryinfo

A vulnerability, which was classified as problematic, has been found in Axis Communications AB AXIS OS up to 12.10.35. This vulnerability affects unknown code of the component Configuration File Handler. Performing a manipulation results in permission assignment. This vulnerability is reported as CVE-2026-1185. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Axis Communications AB AXIS OS up to 12.10.35. This affects an unknown functionality of the component Configuration File Handler. The manipulation with an unknown input leads to a permission assignment vulnerability. CWE is classifying the issue as CWE-732. The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. This is going to have an impact on integrity, and availability. The summary by CVE is:

A configuration file on the local file system had improper input validation which could allow code execution and potentially lead to privilege escalation. This vulnerability can only be exploited if an attacker can log in to the Axis device using SSH.

The weakness was disclosed by Cookiejack15. The advisory is shared at axis.com. This vulnerability is uniquely identified as CVE-2026-1185 since 01/19/2026. The exploitability is told to be easy. It is possible to initiate the attack remotely. Neither technical details nor an exploit are publicly available.

Upgrading to version 12.10.36 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at CERT Bund (WID-SEC-2026-1476). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Affected

• Axis Axis OS

Productinfo

Vendor

• Axis Communications AB

Name

• AXIS OS

Version

• 12.10.0
• 12.10.1
• 12.10.2
• 12.10.3
• 12.10.4
• 12.10.5
• 12.10.6
• 12.10.7
• 12.10.8
• 12.10.9
• 12.10.10
• 12.10.11
• 12.10.12
• 12.10.13
• 12.10.14
• 12.10.15
• 12.10.16
• 12.10.17
• 12.10.18
• 12.10.19
• 12.10.20
• 12.10.21
• 12.10.22
• 12.10.23
• 12.10.24
• 12.10.25
• 12.10.26
• 12.10.27
• 12.10.28
• 12.10.29
• 12.10.30
• 12.10.31
• 12.10.32
• 12.10.33
• 12.10.34
• 12.10.35

License

• free

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion