Medium severity6.7NVD Advisory· Published May 12, 2026· Updated May 19, 2026
CVE-2026-0804
CVE-2026-0804
Description
An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
Affected products
2Patches
Vulnerability mechanics
References
1- www.axis.com/dam/public/51/64/ea/cve-2026-0804pdf-en-US-530732.pdfnvdVendor Advisory
News mentions
0No linked articles in our index yet.