VULNERABILITY INTELLIGENCE
CVE-2025-9055
CVSS score6.4 MEDIUM
EPSS probability0.12%
CISA KEVNot currently listed
Published2025-11-11
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator-privileged user to gain Linux Root privileges. This flaw can only be exploited after authenticating with an administrator-privileged service account.
Weakness classification
- product-security@axis.com: CWE-250