cvedb.io
CVE-2025-3892
MEDIUM · CVSS 6.7
EPSS exploitation probability: 0%
Published 2025-08-12T06:15:26.040 · Last modified 2026-06-17T09:20:52.550

Summary

ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.

Affected products

axis — axis_os

Does this affect you?

Add your gear to cvedb and we'll alert you only when axis ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.