Input Validation Flaw in Axis Device Configurations

CVE-2026-1185

What is CVE-2026-1185?

A configuration file on the local filesystem of Axis devices has improper input validation, which may enable an attacker to execute arbitrary code and escalate privileges. For exploitation to occur, the attacker must have previously authenticated to the Axis device via SSH. This vulnerability poses a significant security risk if not addressed, as it could allow unauthorized users to gain elevated access and control over the affected device.

References