<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: axis os</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-1185: A configuration file on the local file system had improper input validation which could allow code execution a</title><link>https://patchthecve.com/cve/CVE-2026-1185.html</link><guid>https://patchthecve.com/cve/CVE-2026-1185.html</guid><pubDate>Mon, 26 Oct 2026 18:10:00 +0000</pubDate><description>MEDIUM 5.4: A configuration file on the local file system had improper input validation which could allow code execution and potentially lead to privilege escalation. This vulnerability can only be exploited if an attacker can log in to the Axis device using SSH.</description></item><item><title>CVE-2026-0804: An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leadi</title><link>https://patchthecve.com/cve/CVE-2026-0804.html</link><guid>https://patchthecve.com/cve/CVE-2026-0804.html</guid><pubDate>Mon, 26 Oct 2026 18:10:00 +0000</pubDate><description>MEDIUM 6.7: An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker co</description></item><item><title>CVE-2026-0802: An ACAP configuration file lacked sufficient input validation, which could allow command injection and potenti</title><link>https://patchthecve.com/cve/CVE-2026-0802.html</link><guid>https://patchthecve.com/cve/CVE-2026-0802.html</guid><pubDate>Mon, 26 Oct 2026 18:10:00 +0000</pubDate><description>MEDIUM 6.0: An ACAP configuration file lacked sufficient input validation, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convi</description></item><item><title>CVE-2026-0541: ACAP applications can gain elevated privileges due to improper input validation during the installation proces</title><link>https://patchthecve.com/cve/CVE-2026-0541.html</link><guid>https://patchthecve.com/cve/CVE-2026-0541.html</guid><pubDate>Mon, 26 Oct 2026 18:10:00 +0000</pubDate><description>MEDIUM 6.7: ACAP applications can gain elevated privileges due to improper input validation during the installation process, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an a</description></item></channel></rss>