CVE-2026-63286
High · 7.1CVSS
7.1
EPSS
0.1%
Published
Oct 28, 2026
CISA due date
—
The record
Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are still vulnerable. AXIS Camera Station Pro automatically creates one more such backup for recovery purpose when the update is applied. Delete all these backups and change the credentials stored in AXIS Camera Station Pro.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-116054 A security vulnerability has been detected in SH3. CWE-326
- CVE-2026-114616 Authlib is a Python library which builds OAuth and OpenID Connect servers. CWE-326
- CVE-2026-112026 A security vulnerability has been detected in light0011 cms… CWE-326
- CVE-2026-77405 RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. CWE-326
- CVE-2026-86670 A flaw has been found in aircheng-org iWebShop-5 up to 5.15. CWE-326
- CVE-2026-17520 The Newsletters WordPress plugin before 4.17 does not generate its API key using a… CWE-326
- CVE-2026-47842 Applications using AesBytesEncryptor with the two-argument constructor or when passing a… CWE-326
- CVE-2026-79084 Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to… CWE-326