Potential Privilege Escalation in Axis Devices due to ACAP Configuration Flaw

CVE-2026-5304

What is CVE-2026-5304?

A critical configuration oversight in Axis network devices permits privilege escalation via an ACAP configuration file that lacks proper input validation. Attackers can exploit this vulnerability if they gain the victim's trust to install a malicious ACAP application, particularly because the device is set to accept unsigned applications. This underscores the need for strict security protocols to prevent unauthorized access and safeguard sensitive operations on Axis devices.

References