{"id":"CVE-2026-63288","published":"2026-11-10T06:17:10.197","lastModified":"2026-11-10T06:17:10.197","description":"A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint. This bypasses the intended authentication layer.","cvssScore":8.3,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","cwes":["CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://www.axis.com/dam/public/fa/79/f5/cve-2026-63288pdf-en-US-561260.pdf","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}