{"affected":[{"defaultStatus":"unaffected","product":"AXIS OS","source":"CNA: Axis","vendor":"Axis Communications AB","versions":[{"lessThan":"13.0.84","status":"affected","version":"13.0.0","versionType":"semver"},{"lessThan":"12.11.123","status":"affected","version":"12.0.0","versionType":"semver"},{"lessThan":"11.11.231","status":"affected","version":"11.0.0","versionType":"semver"},{"lessThan":"10.12.354","status":"affected","version":"10.0.0","versionType":"semver"},{"lessThan":"9.80.153","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThan":"8.40.112","status":"affected","version":"7.0.0","versionType":"semver"},{"lessThan":"6.50.5.23","status":"affected","version":"6.0.0","versionType":"semver"}]}],"cveId":"CVE-2026-63282","cwes":["CWE-1287"],"description":"Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which could lead to privilege escalation.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.5,"severity":"medium","source":"CNA: Axis","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","version":"3.1"}],"modifiedAt":1794288210194,"publishedAt":1794288210194,"references":[{"source":"CNA: Axis","tags":[],"url":"https://www.axis.com/dam/public/c5/06/79/cve-2026-63282pdf-en-US-561259.pdf"}],"remediation":[],"revision":"7f55b0fe9fb8e5970783fa1cc6a7d5cfb316c550340dc2697c608afe83f0b8e2","sources":[{"modifiedAt":1794288210194,"name":"CNA: Axis","retrievedAt":1794290942562,"url":"https://www.cve.org/CVERecord?id=CVE-2026-63282"}],"ssvc":null,"status":"published","title":"CVE-2026-63282","updatedAt":1794290942562}