CVE-2026-5304: CVE-2026-5304: güvenlik açığı

Açıklama (NVD)

An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.

Özet bilgiler

CVSS v3.1

5.7 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N

EPSS

%0,31 (yüzdelik 24)

CWE

CWE-1287

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• www.axis.com
• CWE-1287