← Vulnerability feed

Vulnerability record · CVE-2025-5126 · published 24 May 2025

CVE-2025-5126: Flir ax8 firmware injection vulnerability

Flir · Flir Ax8 Firmware

A vulnerability was found in Teledyne FLIR AX8 up to 1.46.16. This vulnerability affects the function setDataTime of the file \usr\www\application\models\settingsregional.php. Performing manipulation of the argument year/month/day/hour/minute results in command injection. The attack may be initiated remotely. The exploit has been made public and could be used. Upgrading to version 1.49.16 is able to resolve this issue. Upgrading the affected component is recommended. The vendor points out: "FLIR AX8 internal web site has been refactored to be able to handle the reported vulnerabilities."

7.4 CVSS 4.0 High EPSS 4.8% · top 8.3% CWE-74 · InjectionCWE-77 · Command injection
7.4CVSS 4.0 base score, v2 9.0
4.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
9References, 3 tagged exploit
17 Jun 2026Last modified by NVD

Description

A vulnerability was found in Teledyne FLIR AX8 up to 1.46.16. This vulnerability affects the function setDataTime of the file \usr\www\application\models\settingsregional.php. Performing manipulation of the argument year/month/day/hour/minute results in command injection. The attack may be initiated remotely. The exploit has been made public and could be used. Upgrading to version 1.49.16 is able to resolve this issue. Upgrading the affected component is recommended. The vendor points out: "FLIR AX8 internal web site has been refactored to be able to handle the reported vulnerabilities."

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/YZS17/CVE/blob/main/Remote%20Command%20Injection%20in%20parameter%20%24hour.md ExploitThird Party Advisory
https://github.com/YZS17/CVE/blob/main/Remote%20Command%20Injection%20in%20parameter%20%24minute.md ExploitThird Party Advisory
https://vuldb.com/?ctiid.310204 Permissions RequiredVDB Entry
https://vuldb.com/?id.310204 Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.570725 Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.572266
https://vuldb.com/?submit.572275
https://vuldb.com/?submit.572277
https://github.com/YZS17/CVE/blob/main/Remote%20Command%20Injection%20in%20parameter%20%24minute.md ExploitThird Party Advisory

Track CVE-2025-5126 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2023-51126Flir ax8 firmware command injection vulnerabilityCommand injection vulnerability in /usr/www/res.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter. NOT…EPSS 31%9.8CVE-2022-37061FLIR AX8 thermal cameras unauthenticated OS command injectionFLIR AX8 thermal sensor cameras up to firmware 1.46.16 pass the id HTTP POST parameter in res.php to a shell without sanitisation, allowing OS comman…EPSS 100%analysed9.3CVE-2018-25138Flir ax8 firmware hard-coded credentials vulnerabilityFLIR AX8 Thermal Camera 1.32.16 contains hard-coded SSH and web panel credentials that cannot be changed through normal camera operations. Attackers …EPSS 0.62%8.7CVE-2018-25139Flir ax8 firmware missing authentication for critical function vulnerabilityFLIR AX8 Thermal Camera 1.32.16 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentia…EPSS 0.53%7.5CVE-2023-51127Flir ax8 firmware path traversal vulnerabilityFLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access restriction. This vulnerabil…EPSS 1.3%7.5CVE-2022-37062Flir ax8 firmware missing authentication for critical function vulnerabilityAll FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are affected by an insecure design vulnerability due to an improper directory…EPSS 3.2%7.5CVE-2022-37060Flir ax8 firmware path traversal vulnerabilityFLIR AX8 thermal sensor cameras version up to and including 1.46.16 is vulnerable to Directory Traversal due to an improper access restriction. An un…EPSS 18%5.5CVE-2022-4364Flir ax8 firmware injection vulnerabilityA vulnerability has been found in Teledyne FLIR AX8 up to 1.46.16. Affected by this issue is some unknown functionality of the file palette.php of th…EPSS 4.3%

Source: NIST National Vulnerability Database (record CVE-2025-5126), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.