{"affected":[{"defaultStatus":"unaffected","product":"AXIS OS","source":"CNA: Axis","vendor":"Axis Communications AB","versions":[{"lessThan":"12.11.80","status":"affected","version":"12.0.0","versionType":"semver"},{"lessThan":"13.0.14","status":"affected","version":"13.0.0","versionType":"semver"}]}],"cveId":"CVE-2026-9063","cwes":["CWE-427"],"description":"A locally authenticated user can achieve privilege escalation via an insecure configuration that leads to unauthorized code execution. This flaw can only be exploited after authenticating with an admin-privileged service account.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.7,"severity":"medium","source":"CNA: Axis","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794287549294,"publishedAt":1794287549294,"references":[{"source":"CNA: Axis","tags":[],"url":"https://www.axis.com/dam/public/37/e2/7c/cve-2026-9063pdf-en-US-561254.pdf"}],"remediation":[],"revision":"0d4e26d3b4040047be07bb5a6618cd791c8158b0b4dc115d7c0c485fb5512f1c","sources":[{"modifiedAt":1794287549294,"name":"CNA: Axis","retrievedAt":1794290949593,"url":"https://www.cve.org/CVERecord?id=CVE-2026-9063"}],"ssvc":null,"status":"published","title":"CVE-2026-9063","updatedAt":1794290949593}