← Back

CVE-2026-0802

nvd nist
Published: May 12, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.3
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.3 / Impact: 5.9
Source: NVD

Description

An ACAP configuration file lacked sufficient input validation, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.

Affected (1)

Products: Axis: Axis Os
Axis
1 product
Axis Os
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Axis Os
From 12.0.0 to 12.9.33

Related CWEs

CWE-1287
Improper Validation of Specified Type of Input
The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.

References (1)

Source: product-security@axis.com
Vendor Advisory

Timeline

No history available yet.