71 matches found
CVE-2026-5304
A flaw was found in Axis devices. An attacker could exploit a lack of input validation in an ACAP AXIS Camera Application Platform configuration file to achieve privilege escalation. This vulnerability requires the Axis device to be configured to allow unsigned ACAP applications, and an attacker...
CVE-2026-6505
The ACAP framework contains a Time-of-Check to Time-of-Use TOCTOU race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces...
CVE-2026-5304
An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a maliciou...
CVE-2026-5303
The ACAP framework contains a Time-of-Check to Time-of-Use TOCTOU race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces...
CVE-2026-6505
The ACAP framework contains a Time-of-Check to Time-of-Use TOCTOU race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces...
EUVD-2026-55966
The ACAP framework contains a Time-of-Check to Time-of-Use TOCTOU race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces...
CVE-2026-6505
The CVE-2026-6505 entry concerns the Axis ACAP framework and a Time-of-Check to Time-of-Use (TOCTOU) race condition that could enable privilege escalation. Exploitation requires the Axis device to be configured to allow unsigned ACAP installations and for a user to be convinced to install a malic...
CVE-2026-5304
An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a maliciou...
EUVD-2026-55965
An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a maliciou...
CVE-2026-5304
CVE-2026-5304 affects Axis devices via an ACAP configuration file input validation weakness. Exploitation requires the device to allow unsigned ACAP installations and user interaction to install a malicious ACAP app, potentially enabling privilege escalation (CVSS v3.1: 5.7, NETWORK, Privileges R...
EUVD-2026-55964
The ACAP framework contains a Time-of-Check to Time-of-Use TOCTOU race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces...
CVE-2026-5303
The CVE-2026-5303 entry concerns the ACAP framework on Axis devices susceptible to a Time‑of‑Check to Time‑of‑Use (TOCTOU) race condition that could enable privilege escalation. Affected scenario requires enabling installation of unsigned ACAP applications and tricking a user into installing a ma...
CVE-2026-5303
The ACAP framework contains a Time-of-Check to Time-of-Use TOCTOU race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces...
EUVD-2026-29384
An ACAP configuration file lacked sufficient input validation, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker...
CVE-2026-0804
An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker...
CVE-2026-0804
An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker...
CVE-2026-0804
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-0802
Technical details are not publicly available in the provided documents for CVE-2026-0802. Monitor for updates from Axis and security advisories; no product/version/impact specifics are disclosed here.
CVE-2026-0802
An ACAP configuration file lacked sufficient input validation, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker...
CVE-2026-0802
An ACAP configuration file lacked sufficient input validation, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker...