Bug 2513779 (CVE-2026-5304) - CVE-2026-5304 Axis: Axis: Privilege escalation via malicious ACAP application installation
Summary: CVE-2026-5304 Axis: Axis: Privilege escalation via malicious ACAP application...
Keywords:
Status: NEW
Alias: CVE-2026-5304
Product: Security Response
Classification: Other
Component: vulnerability-draft
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-08-11 06:01 UTC by OSIDB Bzimport
Modified: 2026-08-19 04:35 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-08-11 06:01:38 UTC 
An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
Note You need to log in before you can comment on or make changes to this bug.