What’s Vulnerable › Vulnerabilities

CVE-2025-6571

• Severity: medium (CVSS 6.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-11 · updated 2026-10-07
• Weakness: CWE-522

Description

A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it.

Affected products

• Axis Communications AB AXIS OS: from 12.0.0 before 12.6.66; from 11.11.0 before 11.11.169 — fixed in 11.11.169, 12.6.66

How to fix

Upgrade to a fixed version: Axis Communications AB AXIS OS 11.11.169, 12.6.66. Check the vendor advisory for mitigations.

References

• https://www.axis.com/dam/public/1f/f8/f0/cve-2025-6571pdf-en-US-504216.pdf

Get alerted when CVE-2025-6571 or the next vulnerability affects your stack