CVE-2026-5304
MediumCVSS 5.7Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow installation of unsigned ACAP applications and if an attacker convinces the victim to install a malicious ACAP application.
Risk Assessment
Privilege escalation could allow an attacker to gain higher privileges on the device, potentially leading to full system compromise.
Recommendation
Update the ACAP configuration file to a patched version and consider disabling installation of unsigned ACAP applications on Axis devices.
Original NVD description (English source)
An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.