CVE-2026-5303: Race Condition
Published Aug 11, 2026
·Updated
The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
Affected Software
0 affected components
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable the setting that allows installation of unsigned ACAP applications to prevent exploitation of the ACAP TOCTOU race condition that could lead to privilege escalation.
Axis device ACAP framework allow installation of unsigned ACAP applications = disabled
Event History
Aug 11, 2026
CVE Published
via MITRE·05:45 AM
Data Sourced
via MITRE·05:45 AM
DescriptionSeverityWeakness