CVE-2026-6505

The ACAP framework contains a Time-of-Check to Time-of-Use TOCTOU race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces...

CVE-2026-6505

The ACAP framework contains a Time-of-Check to Time-of-Use TOCTOU race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces...

CVE-2026-5304

An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a maliciou...

CVE-2026-5303

The CVE-2026-5303 entry concerns the ACAP framework on Axis devices susceptible to a Time‑of‑Check to Time‑of‑Use (TOCTOU) race condition that could enable privilege escalation. Affected scenario requires enabling installation of unsigned ACAP applications and tricking a user into installing a ma...

PT-2026-70072

Name of the Vulnerable Software and Affected Versions Axis ACAP framework affected versions not specified Description The ACAP framework contains a Time-of-Check to Time-of-Use TOCTOU race condition, which is a software bug where a system checks the state of a resource before using it, but the...

PT-2026-70069

Name of the Vulnerable Software and Affected Versions Axis ACAP framework affected versions not specified Description The ACAP framework contains a Time-of-Check to Time-of-Use TOCTOU race condition, which is a software bug where a system checks the state of a resource before using it, but the...

PT-2025-46306

Name of the Vulnerable Software and Affected Versions Axis ACAP Application framework affected versions not specified Description The ACAP Application framework may allow for privilege escalation through a symlink attack. Exploitation requires the Axis device to be configured to permit the...

PT-2025-46310

Name of the Vulnerable Software and Affected Versions Axis Communications affected versions not specified Description An ACAP configuration file has improper permissions and lacks input validation, potentially leading to privilege escalation. Exploitation requires the Axis device to allow the...