CVE-2026-6181 Auth bypass in AXIS OS
An attacker with viewer privileges can bypass authentication in the Device Configuration Framework to gain higher access on Axis cameras.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-6181?
CVE-2026-6181 is a medium-severity authentication bypass vulnerability in AXIS OS, published on 11 Aug 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after authenticating with a viewer-privileged service account.
Weakness: CWE-290
Which versions are affected by CVE-2026-6181?
How do I fix CVE-2026-6181?
No fix has been published for CVE-2026-6181 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-6181 being exploited?
There is no known exploitation of CVE-2026-6181 in the wild and no public exploit code.
Sources
Also known as GHSA-wr2x-95cv-cwrg.