CVE-2025-0324

AXIS OS (Axis Communications) vulnerability CVE-2025-0324 affects AXIS OS versions 11.8 through 12.2, via the VAPIX Device Configuration framework, causing privilege escalation from a lower-privileged user to administrator. Root cause described as an elevation of privilege issue. Public details a...

CVE-2025-0358

CVE-2025-0358 concerns Axis Communications’ VAPIX Device Configuration framework. Multiple connected sources indicate a privilege-escalation flaw where a lower-privileged user can gain administrator privileges. CNNVD specifies Axis OS versions 12.0–12.3 with the issue arising from improper privil...

CVE-2026-0804

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2025-3892

CVE-2025-3892 concerns Axis devices running ACAP; the issue allows elevated privileges when an Axis device is configured to allow unsigned ACAP applications and a malicious ACAP app is installed after user trickery. The CVSS details indicate LOCAL exploitation with HIGH privileges required, high ...

CVE-2026-0802

Technical details are not publicly available in the provided documents for CVE-2026-0802. Monitor for updates from Axis and security advisories; no product/version/impact specifics are disclosed here.

CVE-2025-5718

The CVE-2025-5718 issue concerns the Axis ACAP Application framework on Axis OS devices. It describes a privilege-escalation vulnerability via a symbolic-link (symlink) attack, exploitable only if the device is configured to allow unsigned ACAP applications and an attacker persuades a user to ins...

CVE-2025-30027

CVE-2025-30027 affects Axis devices via insufficient input validation in ACAP configuration files, enabling arbitrary code execution. Exploitation requires the device to allow unsigned ACAP apps and a user to install a malicious ACAP application. Impact: high on confidentiality, integrity, and av...

CVE-2025-5454

Axis ACAP path-traversal vulnerability (CVE-2025-5454) affects Axis OS/ACAP configuration handling on Axis devices. The issue arises from insufficient input validation in ACAP configuration files, enabling potential local path traversal andPrivilege escalation when an Axis device is configured to...

CVE-2026-1185

CVE-2026-1185 concerns an issue in Axis devices where a local file system configuration file is not properly validating input, enabling code execution and potential privilege escalation. The vulnerability requires an attacker to log in to the device via SSH, limiting exposure to authenticated acc...

CVE-2026-0541

CVE-2026-0541 concerns Axis devices where ACAP applications can gain elevated privileges due to improper input validation during the installation process. The root cause is input validation issues when installing ACAP apps, and exploitation is possible only if the device is configured to allow un...

CVE-2025-6779

CVE-2025-6779 affects Axis devices running Axis OS where an ACAP configuration file has improper permissions. The underlying issue could permit command injection and privilege escalation, but exploitation is contingent on the device being configured to allow unsigned ACAP applications and an atta...

CVE-2025-5452

Axis devices running ACAP with unsigned app installation enabled are reported to be vulnerable to a malicious ACAP application that can obtain admin-level service account credentials used by legitimate ACAP apps, potentially enabling privilege escalation. Exploitation requires convincing a user t...

CVE-2025-4645

CVE-2025-4645 affects Axis OS/Axis ACAP handling: an ACAP configuration file with insufficient input validation can lead to arbitrary code execution if an Axis device is configured to allow unsigned ACAP apps and a victim is persuaded to install a malicious ACAP package. The vulnerability is atta...

CVE-2025-8108

CVE-2025-8108 involves Axis ACAP on Axis OS devices. The root cause is an ACAP configuration file with improper permissions and missing input validation, which could enable privilege escalation when the device is configured to allow unsigned ACAP applications and a user is convinced to install a ...