EIP-2026-100746

PRE-CVE

Axis Network Camera 2.x And Video Server 1-3 - Directory Traversal

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100746. PoCs published by bashis.

AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Axis network cameras and video servers, allowing unauthenticated remote administration by bypassing authentication checks via a crafted HTTP POST request.

Description

Axis Network Camera 2.x And Video Server 1-3 - Directory Traversal

Exploits (1)

exploitdb WORKING POC VERIFIED
by bashis · textwebappscgi
https://www.exploit-db.com/exploits/24401

This exploit demonstrates a directory traversal vulnerability in Axis network cameras and video servers, allowing unauthenticated remote administration by bypassing authentication checks via a crafted HTTP POST request.

Classification
Working Poc 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: Axis 2100, 2110, 2120, 2420, 2130, 2401, 2401 video servers with firmware versions 2.12 thru 2.40
No auth needed
Prerequisites: Network access to the target device
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026