CVE-2018-25139 FLIR AX8 Thermal Camera 1.32.16 Unauthenticated RTSP Stream Disclosure

High 8.7 Published 24 Dec 2025 Updated 1 Oct 2026

Remote attackers can access live thermal video streams without authentication, exposing sensitive visual data from FLIR AX8 cameras.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-25139?

CVE-2018-25139 is a high-severity missing authorization vulnerability in FLIR AX8 Thermal Camera, published on 24 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

FLIR AX8 Thermal Camera 1.32.16 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly connect to the RTSP stream using tools like VLC or FFmpeg to view and record thermal camera footage.

Weakness: CWE-306

Which versions are affected by CVE-2018-25139?

It affects 1 product.

Products include Flir Flir Ax8 Firmware.

How do I fix CVE-2018-25139?

No fix has been published for CVE-2018-25139 yet. Limit exposure of the affected software until one is available.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2018-25139 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2018-25139 exists.

Sources

Also known as GHSA-c68w-pf33-46g8.