Quick answers
- Is CVE-2026-0541 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-0541 being exploited in the wild.
- How severe is CVE-2026-0541?
- Medium severity, with a CVSS score of 6.7, published 12 May 2026.
- Which products and versions are affected?
- Axis Communications OS 12.0.0 to 12.9.32.
- Is there a fix for CVE-2026-0541?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-0541 attacked?
- It is attacked with local access, in an operating system.
- Am I affected by CVE-2026-0541?
- Check whether you run Axis Os, Axis Communications Camera Application Platform or Axis Communications OS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A privilege escalation vulnerability exists in AXIS OS due to improper input validation (CWE-732) during the installation process of AXIS Camera Application Platform (ACAP) applications. An attacker can exploit this by creating a malicious ACAP application that, when installed, gains elevated system privileges. The attack requires the target device to be configured to allow the installation of unsigned ACAP applications and typically involves social engineering to convince an administrator to perform the installation. Successful exploitation allows the application to bypass intended permission boundaries, leading to a full compromise of the device's confidentiality, integrity, and availability. The issue is addressed in AXIS OS version 12.9.32.
Affected products
- Axis Communications AXIS OS 12.0.0 to 12.9.32
Timeline
- 2026-05-12: disclosed
- 2026-05-12: advisory