Path Traversal Vulnerability in Axis Device ACAP Configuration

CVE-2026-0804

What is CVE-2026-0804?

A vulnerability exists in the ACAP configuration of Axis devices due to inadequate input validation. This flaw allows for path traversal attacks, potentially leading to privilege escalation. The risk is heightened if the device is set to permit the installation of unsigned ACAP applications, which could be exploited by an attacker persuading a user to install a malicious application.

References