ACAP applications can gain elevated privileges due to improper input validation during the installation process, potentially leading to privilege escalation.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. May 12, 2026 · NIST NVD

   Detected

   ACAP applications can gain elevated privileges due to improper input validation during the installation process, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.

2. Jun 17, 2026 · NIST NVD

   Updated

   ACAP applications can gain elevated privileges due to improper input validation during the installation process, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.

Affected

• cpe axis/axis osversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-0541

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-0541

  ACAP applications can gain elevated privileges due to improper input validation during the installation process, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP appli

  nvd.nist.gov

References

• Vendor Advisory · axis.com