Medium severity4.3NVD Advisory· Published Nov 11, 2025· Updated Apr 15, 2026

CVE-2025-9524

Description

The VAPIX API port.cgi did not have sufficient input validation, which may result in process crashes and impact usability. This vulnerability can only be exploited after authenticating with a viewer- operator- or administrator-privileged service account.

Affected products

Axis/VAPIX APIllm-create

Patches

Vulnerability mechanics

References

www.axis.com/dam/public/f1/f0/1e/cve-2025-9524pdf-en-US-504220.pdfnvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000