CVE-2026-6505

The ACAP framework contains a Time-of-Check to Time-of-Use TOCTOU race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces...

PT-2026-70072

Name of the Vulnerable Software and Affected Versions Axis ACAP framework affected versions not specified Description The ACAP framework contains a Time-of-Check to Time-of-Use TOCTOU race condition, which is a software bug where a system checks the state of a resource before using it, but the...

PT-2026-70069

Name of the Vulnerable Software and Affected Versions Axis ACAP framework affected versions not specified Description The ACAP framework contains a Time-of-Check to Time-of-Use TOCTOU race condition, which is a software bug where a system checks the state of a resource before using it, but the...

PT-2025-46306

Name of the Vulnerable Software and Affected Versions Axis ACAP Application framework affected versions not specified Description The ACAP Application framework may allow for privilege escalation through a symlink attack. Exploitation requires the Axis device to be configured to permit the...