Privilege Escalation Vulnerability in Axis Devices due to Improper Input Validation

CVE-2026-0541

What is CVE-2026-0541?

Axis devices are vulnerable to an issue where improper input validation during the installation process of ACAP applications allows attackers to gain elevated privileges. This scenario demands that the device settings permit the installation of unsigned ACAP applications, alongside the successful convincing of a user to install a malicious application. Implementing stringent validation measures and ensuring that users are aware of the risks associated with installing unverified software is crucial in mitigating this risk.

References