CVE-2026-6505: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition in Axis Communications AB AXIS OS
CVE-2026-6505 is a medium severity vulnerability in Axis Communications AB AXIS OS version 12.0.0. It involves a Time-of-Check to Time-of-Use (TOCTOU) race condition in the ACAP framework that could allow privilege escalation. Exploitation requires the device to be configured to allow installation of unsigned ACAP applications and user interaction to install a malicious app.
AI Analysis
Technical Summary
This vulnerability is a TOCTOU race condition in the ACAP framework of AXIS OS, which can lead to privilege escalation if exploited. The flaw exists only when the device permits installation of unsigned ACAP applications. An attacker must convince a user to install a malicious ACAP application to exploit this issue. The CVSS 3.1 base score is 5.1, reflecting medium severity with local attack vector, high attack complexity, required high privileges, and user interaction. No official patch or remediation guidance is currently available from the vendor.
Potential Impact
Successful exploitation could result in privilege escalation on the affected device, potentially allowing an attacker to gain higher privileges than intended. However, exploitation requires local access with high privileges, user interaction, and the device must be configured to allow unsigned ACAP applications, limiting the attack surface.
Mitigation Recommendations
No official patch or remediation is currently available. Mitigation involves ensuring that devices are not configured to allow installation of unsigned ACAP applications and exercising caution to prevent installation of untrusted ACAP applications. Monitor vendor advisories for updates or patches addressing this vulnerability.
CVE-2026-6505: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition in Axis Communications AB AXIS OS
Description
CVE-2026-6505 is a medium severity vulnerability in Axis Communications AB AXIS OS version 12.0.0. It involves a Time-of-Check to Time-of-Use (TOCTOU) race condition in the ACAP framework that could allow privilege escalation. Exploitation requires the device to be configured to allow installation of unsigned ACAP applications and user interaction to install a malicious app.
CVSS v3.1
Score 5.1medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability is a TOCTOU race condition in the ACAP framework of AXIS OS, which can lead to privilege escalation if exploited. The flaw exists only when the device permits installation of unsigned ACAP applications. An attacker must convince a user to install a malicious ACAP application to exploit this issue. The CVSS 3.1 base score is 5.1, reflecting medium severity with local attack vector, high attack complexity, required high privileges, and user interaction. No official patch or remediation guidance is currently available from the vendor.
Potential Impact
Successful exploitation could result in privilege escalation on the affected device, potentially allowing an attacker to gain higher privileges than intended. However, exploitation requires local access with high privileges, user interaction, and the device must be configured to allow unsigned ACAP applications, limiting the attack surface.
Mitigation Recommendations
No official patch or remediation is currently available. Mitigation involves ensuring that devices are not configured to allow installation of unsigned ACAP applications and exercising caution to prevent installation of untrusted ACAP applications. Monitor vendor advisories for updates or patches addressing this vulnerability.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Axis
- Date Reserved
- 2026-04-17T10:41:05.220Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a7ab9aabf8831d539367fb2
Added to database: 08/11/2026, 05:56:58 UTC
Last enriched: 08/11/2026, 06:14:57 UTC
Last updated: 08/11/2026, 06:21:58 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.