PT-2026-39939 · Axis Communications · Axis Os

Mucoze · Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-0802

Mitre

CVSS v3.1

6.0

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

An ACAP configuration file lacked sufficient input validation, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.

Fix

Weakness Enumeration

CWE-1287

Related Identifiers

CVE-2026-0802

Affected Products

Axis Os

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-0802 · Security Note
• https://axis.com/dam/public/67/b8/75/cve-2026-0802pdf-en-US-530731.pdf · Note