← Back

CVE-2025-6298

nvd nist
Published: Nov 11, 2025Modified: Jun 17, 2026

JSON object

Loading...
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: product-security@axis.com (Secondary)

Description

ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.

Affected (1)

Products: Axis: Axis Os
Axis
1 product
Axis Os
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Axis Os
Before 12.6.28

Related CWEs

CWE-1287
Improper Validation of Specified Type of Input
The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.

References (1)

Source: product-security@axis.com
Vendor Advisory

Timeline

No history available yet.