CVE-2026-6181CWE-290

CVE-2026-6181

Medium · published August 11, 2026

CVSS v3.1

5.9

EPSS

Percentile

32.3

In the wild

Unconfirmed

What it is

The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after authenticating with a viewer-privileged service account.

The record

Technical detail

CVSS v3.1: 5.9 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0: Not supplied
EPSS: 0.00393 · 32.3th percentile
Weakness: CWE-290 · Authentication Bypass by Spoofing
Published: 2026-08-11T10:17Z

References (1)

https://www.axis.com/dam/public/9d/8a/ea/cve-2026-6181pdf-en-US-543646.pdf · [email protected]

EPSS history

Timeline

11 AUG 05:38Z
The Device Configuration Framework is vulnerable to an authentication bypass flaw
cvelistv5