Unrated severityNVD Advisory· Published Nov 11, 2025· Updated Feb 26, 2026
CVE-2025-6779
CVE-2025-6779
Description
An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
Affected products
2- Axis Communications AB/AXIS OSv5Range: 12.0.0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.