This vulnerability (CVE-2026-0541) affects AXIS OS 12.0.0 and involves incorrect permission assignment (CWE-732) for critical resources during the installation of ACAP applications. Improper input validation allows an ACAP application to escalate privileges if the device permits unsigned application installation and the user installs a malicious app. The CVSS 3.1 vector indicates local attack vector with low attack complexity, requiring high privileges but no user interaction, and impacts confidentiality, integrity, and availability at a high level. The vendor has not provided a remediation level or patch information, and the device is not a cloud service, so remediation depends on vendor updates or configuration changes.

Successful exploitation could lead to privilege escalation on the AXIS OS device, potentially compromising confidentiality, integrity, and availability of the system. This could allow an attacker to execute unauthorized actions with elevated privileges via a malicious ACAP application. However, exploitation requires specific conditions: the device must allow unsigned ACAP application installation and the user must install the malicious application. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to disable the installation of unsigned ACAP applications on AXIS OS devices to prevent exploitation. Users should also avoid installing ACAP applications from untrusted sources.