# CVE-2026-0804: Axis AXIS OS path traversal in ACAP configuration

Source: https://junglewise.ai/threats/cve-2026-0804-axis-axis-os-path-traversal-in-acap-configuration  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-12. Updated: 2026-05-19  
License: CC BY 4.0 with a link back

CVE-2026-0804 · Severity: medium · CVSS 6.7 · Published 2026-05-12

A security vulnerability exists in Axis network devices that could allow an attacker to gain higher-level administrative control over the system. To exploit this, an attacker must first convince a user to install a specially crafted, malicious application on a device that has been configured to allow unsigned software. This could lead to a full compromise of the device, affecting its availability and the security of the data it processes.

Technologies: [Axis Os](https://junglewise.ai/threats/technologies/axis-os), [Axis Communications OS](https://junglewise.ai/threats/technologies/os). Vendors: [Axis](https://junglewise.ai/threats/vendors/axis), [Axis Communications](https://junglewise.ai/threats/vendors/axis-communications).

## Quick answers

**Is CVE-2026-0804 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-0804 being exploited in the wild.

**How severe is CVE-2026-0804?** Medium severity, with a CVSS score of 6.7, published 12 May 2026.

**Which products and versions are affected?** Axis Communications OS 12.0.0 to 12.10.4.

**Is there a fix for CVE-2026-0804?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-0804 attacked?** It is attacked with local access, in an operating system.

**Am I affected by CVE-2026-0804?** Check whether you run Axis Os, Axis Communications ACAP or Axis Communications OS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A path traversal vulnerability (CWE-35) exists in the ACAP (AXIS Camera Application Platform) configuration file due to insufficient input validation. An attacker can exploit this by creating a malicious ACAP application that uses path traversal sequences to access or modify restricted files. Successful exploitation requires the target Axis device to be configured to allow the installation of unsigned ACAP applications and requires the attacker to trick an authorized user into installing the malicious package. This can result in local privilege escalation, granting the attacker elevated permissions on the AXIS OS.

## Affected products

- Axis Communications AXIS OS 12.0.0 to 12.10.4

## Timeline

- 2026-05-12: disclosed
- 2026-05-12: advisory

## References

- [https://www.axis.com/dam/public/51/64/ea/cve-2026-0804pdf-en-US-530732.pdf](https://www.axis.com/dam/public/51/64/ea/cve-2026-0804pdf-en-US-530732.pdf)

## Related threats

- [Axis AXIS OS privilege escalation via configuration file](https://junglewise.ai/threats/cve-2026-1185-axis-axis-os-privilege-escalation-via-configuration-file)
- [Axis AXIS OS command injection in ACAP configuration file](https://junglewise.ai/threats/cve-2026-0802-axis-axis-os-command-injection-in-acap-configuration-file)
- [Axis AXIS OS privilege escalation in ACAP installation](https://junglewise.ai/threats/cve-2026-0541-axis-axis-os-privilege-escalation-in-acap-installation)
- [ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege…](https://junglewise.ai/threats/cve-2025-6298-acap-applications-can-gain-elevated-privileges-due-to-improper)
- [A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP…](https://junglewise.ai/threats/cve-2025-5452-a-malicious-acap-application-can-gain-access-to-admin-level)