Vulnerabilities

CVSS

5.7 Medium

Vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N

Risk score

45.6

Published

2026-08-11

Status

Published

The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.

Weaknesses

CWE-367

Coverage 1

vulnerability

Multiples vulnérabilités dans les produits Axis (19 août 2026)

Multiple vulnerabilities have been discovered in Axis products, including remote code execution, privilege escalation, and denial-of-service attacks. These vulnerabilities affect various Axis products, requiring immediat…

CERT-FR · Aug 19, 2026 High

CVE-2026-4757CVE-2026-5303CVE-2026-5304vulnerabilityremote code executionprivilege escalation

All articles mentioning it

Advisories and references

• axis.com/dam/public/d5/e8/6e/cve-2026-5303pdf-en-US-543643.pdf