CVE-2025-11547 Privilege escalation in AXIS Camera Station Pro
A non-admin user can escalate privileges on the AXIS Camera Station Pro server, requiring attention from system administrators.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-11547?
CVE-2025-11547 is a high-severity vulnerability in AXIS Camera Station Pro, published on 10 Feb 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server as a non-admin user.
Weakness: CWE-532
Which versions are affected by CVE-2025-11547?
It affects 1 product.
Products include Axis Camera Station Pro.
How do I fix CVE-2025-11547?
No fix has been published for CVE-2025-11547 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-11547 being exploited?
There is no known exploitation of CVE-2025-11547 in the wild and no public exploit code.
Other vulnerabilities in AXIS Camera Station Pro
Sources
Also known as GHSA-fpp3-fr29-g442.