CVE-2025-9055CWE-250

CVE-2025-9055

Medium · published November 11, 2025

CVSS v3.1
6.4
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator-privileged user to gain Linux Root privileges. This flaw can only be exploited after authenticating with an administrator-privileged service account.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00124 · 1.9th percentile
Weakness
CWE-250 · Execution with Unnecessary Privileges
Published
2025-11-11T13:15Z
References (1)
https://www.axis.com/dam/public/23/a3/00/cve-2025-9055pdf-en-US-504219.pdf · [email protected]
EPSS history
Timeline
  • 11 NOV 07:31Z
    The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator-privileged user to gain Linux Root privileges
    cvelistv5