Unrated severityNVD Advisory· Published Jan 10, 2024· Updated Oct 17, 2025
CVE-2023-51126
CVE-2023-51126
Description
Command injection vulnerability in /usr/www/res.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter. NOTE: The vendor has stated that with the introduction of firmware version 1.49.16 (Jan 2023) the FLIR AX8 should no longer be affected by the vulnerability reported. Latest firmware version (as of Oct 2025, was released Jun 2024) is 1.55.16.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- FLIR/AX8description
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.