[axis]

October 30, 2026

• Axis Camera Station gets a full chain write-up: unauthenticated RCE (CVE-2025-30026/CVE-2025-30023) through to decrypting every stored camera credential (CVE-2026-63286) (Ricardo Rodríguez). Huntress separately reports a campaign using camera management software as the initial-access route into victim environments (Huntress). · Vulnerabilities & Disclosures

in Attackers Go for the Management Plane