Quick answers
- Is CVE-2026-0802 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-0802 being exploited in the wild.
- How severe is CVE-2026-0802?
- Medium severity, with a CVSS score of 6, published 12 May 2026.
- Which products and versions are affected?
- Axis Communications OS 12.0.0 to 12.9.33.
- Is there a fix for CVE-2026-0802?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-0802 attacked?
- It is attacked with local access, in device firmware.
- Am I affected by CVE-2026-0802?
- Check whether you run Axis Os, Axis Communications ACAP or Axis Communications OS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A command injection vulnerability exists in the AXIS Camera Application Platform (ACAP) configuration file due to improper validation of specified input types (CWE-1287). The flaw allows an attacker to execute arbitrary commands with elevated privileges. Exploitation requires the target device to be configured to allow the installation of unsigned ACAP applications and necessitates that an attacker convinces a user to install a malicious application. The vulnerability affects AXIS OS versions from 12.0.0 up to 12.9.33. Axis has released a vendor advisory and updated firmware to address the issue.
Affected products
- Axis Communications AXIS OS 12.0.0 to 12.9.33
Timeline
- 2026-05-12: disclosed
- 2026-05-12: advisory: Vendor advisory published by Axis Communications