PT-2026-39940 · Axis Communications · Axis Os

Mucoze · Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-0804

Mitre

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.

Fix

Weakness Enumeration

CWE-35

Related Identifiers

CVE-2026-0804

Affected Products

Axis Os

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-0804 · Security Note
• https://axis.com/dam/public/51/64/ea/cve-2026-0804pdf-en-US-530732.pdf · Note