High severity8.3NVD Advisory· Published Nov 10, 2026

CVE-2026-63288

Description

A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint. This bypasses the intended authentication layer.

Affected products

Axis/APIllm-create

Patches

Vulnerability mechanics

References

www.axis.com/dam/public/fa/79/f5/cve-2026-63288pdf-en-US-561260.pdfnvd

News mentions

No linked articles in our index yet.

cvss	0.540
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000