Axis Axis OS: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 5

• High 7.2
  CVE-2026-4757

  A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privileg…

  Axis Communications AB AXIS OS
  Aug 11, 2026
• Medium 5.9
  CVE-2026-6181

  The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited afte…

  Axis Communications AB AXIS OS
  Aug 11, 2026
• Medium 5.7
  CVE-2026-5303

  The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to pri…

  Axis Communications AB AXIS OS
  Aug 11, 2026
• Medium 5.7
  CVE-2026-5304

  An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerabi…

  Axis Communications AB AXIS OS
  Aug 11, 2026
• Medium 5.1
  CVE-2026-6505

  The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to pri…

  Axis Communications AB AXIS OS
  Aug 11, 2026

Revision history

1. 2026-08-18 #1

   Initiale Fassung

References

• Axis Security Bulletin CVE-2026-4757 vom 2026-08-18
  https://www.axis.com/dam/public/41/7d/0f/cve-2026-4757pdf-en-US-543642.pdf
• Axis Security Bulletin CVE-2026-5303 vom 2026-08-18
  https://www.axis.com/dam/public/d5/e8/6e/cve-2026-5303pdf-en-US-543643.pdf
• Axis Security Bulletin CVE-2026-5304 vom 2026-08-18
  https://www.axis.com/dam/public/21/37/f2/cve-2026-5304pdf-en-US-543644.pdf
• Axis Security Bulletin CVE-2026-6181 vom 2026-08-18
  https://www.axis.com/dam/public/9d/8a/ea/cve-2026-6181pdf-en-US-543646.pdf
• Axis Security Bulletin CVE-2026-6505 vom 2026-08-18
  https://www.axis.com/dam/public/fd/16/ab/cve-2026-6505pdf-en-US-543641.pdf