CVE-2026-1185CWE-732

A configuration file on the local file system had improper input validation which could allow code execution and potentially lead to privilege escalation

Medium · published May 12, 2026

CVSS v3.1
5.4
EPSS
0%
Percentile
12.6
In the wild
Unconfirmed
What it is

A configuration file on the local file system had improper input validation which could allow code execution and potentially lead to privilege escalation. This vulnerability can only be exploited if an attacker can log in to the Axis device using SSH.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00226 · 12.6th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2026-05-12T05:49Z
EPSS history
Timeline
  • 12 MAY 05:49Z
    A configuration file on the local file system had improper input validation which could allow code execution and potentially lead to privilege escalation
    cvelistv5