Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Axis Communications AB | AXIS A1210 - Secure Entry | unaffected |
|
||||||
| Axis Communications AB | AXIS A1601 - Secure Entry | unaffected |
|
||||||
| Axis Communications AB | AXIS A1610 - Secure Entry | unaffected |
|
||||||
| Axis Communications AB | AXIS A1710 | unaffected |
|
||||||
| Axis Communications AB | AXIS A1810 - Secure Entry | unaffected |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Tue, 10 Nov 2026 05:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint. This bypasses the intended authentication layer. | |
| Weaknesses | CWE-306 | |
| References |
| |
| Metrics |
cvssV3_1
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: Axis
Published:
Updated: 2026-11-10T05:32:06.255Z
Reserved: 2026-07-16T08:28:41.293Z
Link: CVE-2026-63288
Vulnrichment
No data.
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
No data.