The ACAP Application framework could allow privilege escalation through a symlink attack. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.
References
| Link | Resource |
|---|---|
| https://www.axis.com/dam/public/3c/a4/6a/cve-2025-5718pdf-en-US-504214.pdf | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
18 Oct 2026, 21:10
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
Information
Published : 2025-11-11 07:15
Updated : 2026-10-18 21:10
NVD link : CVE-2025-5718
Mitre link : CVE-2025-5718
CVE.ORG link : CVE-2025-5718
JSON object : View
Products Affected
axis
- c1110-e
- q2101-te
- d6310
- q1800-le
- p1387
- p1385
- p4705-plve
- p3267-lve_mic
- p3275-lv
- w120
- p3735-ple
- q1686-dle
- m1055-l
- c1410_mk_ii
- a1710-b
- p3285-lv
- p3268-slve
- c8110
- q3538-lve
- p1518-le
- p3267-lv
- q1656-b
- f9114-b_main_unit
- m5075-g
- p1465-le-3
- p1518-e
- p3827-pve
- a1610_\(-b\)
- q1728-le
- q1805-le
- xpq1785
- d2210-ve
- m4228-lve
- c6110
- m4215-lv
- i7010-safety
- m1137-e_mk_ii
- m5526-e
- p3748-plve
- f9114-bt
- m3216-lve
- q8615-e
- f9104-b_main_unit
- f9111_main_unit
- m4218-lv
- p3265-lv
- m3215-lve
- excam_xpt_q6075
- i8116-e
- p1388-le
- p1388-b
- p5654-e_mk_ii
- q6300-e
- i8307-ve
- q6075-s
- fa54
- p4708-plve
- q3538-slve
- p3925-r
- m3085-v
- c1210-e
- q3819-pve
- i7010-ve
- axis_os
- a8207-ve_mk_ii
- i8016-lve
- a1601
- p3277-lv
- q3546-lve
- q6078-e
- q3558-lve
- q8752-e
- m4225-lve
- f9111-r_mk_ii_main_unit
- p1388-be
- m3086-v
- f9104-b_mk_ii_main_unit
- w101
- q1800-le-3
- m4308-ple
- a1214
- m4318-plve
- p3278-lve
- q4809-pve
- p1387-le
- q1715
- w102
- c1511
- d1110
- m7104
- q3536-lve
- q6075-se
- p3278-lv
- p1245_mk_ii
- m3126-lve
- xf40-q1785
- p3267-lve
- xc1311
- fa51-b
- p3935-lr
- xfq1656
- m1135-e_mk_ii
- p3265-v
- m4216-v
- p5654-e
- q1961-xte
- v5925
- q1615_mk_iii
- p1465-le
- m4227-lve
- f9114_main_unit
- q1961-te
- m3125-lve
- m2036-le
- excam_xf_q1785
- m4218-v
- m4216-lv
- p1385-b
- m3057-plr_mk_ii
- p3288-lv
- q6135-le
- q6358-le
- p3275-lve
- q6074
- w110
- p3925-lre
- q6318-le
- m7116
- p1265_mk_ii
- c8210
- f9114-b-r_mk_ii_main_unit
- m2035-le
- p3737-ple
- m3905-r
- c1610-ve
- p3288-lve
- q1798-le
- s4000
- p1385-e
- m1137
- p4707-plve
- q3556-lve
- q6075
- c1310-e_mk_ii
- c1710
- p1467-le
- p3265-lve
- q1806-le
- q1972-e
- v5938
- q1656-le
- p3747-plve
- p3265-lve-3
- i7020
- q6075-e
- fa51
- p3277-lve
- q1656-be
- q3626-ve
- q6074-e
- p5655-e
- q3839-pve
- m4328-p
- p1387-be
- w401
- q1809-le
- q1971-e
- f9111_mk_ii_main_unit
- p1275_mk_ii
- p3285-lve
- s3016
- q1656
- q1728
- m4215-v
- p3268-lve
- m1075-l
- p1388
- a1210_\(-b\)
- p5676-le
- m3128-lve
- q3628-ve
- s3008
- s3008_mk_ii
- m5000
- q2112-e
- m1135
- p7304
- m5075
- p1385-be
- m3086-v_mic
- m4327-p
- p3738-ple
- p1387-b
- p9117-pv
- m4317-plr
- q3548-lve
- q6355-le
- q9307-lv
- d3110_mk_ii
- p1468-le
- p3818-pve
- d201-s_xpt_q6075
- p3287-lve
- w100
- q6315-le
- q8752-e_mk_ii
- d4100-ve_mk_ii
- q1656-ble
- a1810-b
- p7316
- q6225-le
- c1211-e
- p1468-xle
- p3287-lv
- q1808-le
- c1111-e
- q1615-le_mk_iii
- m4318-plr
- q2111-e
- q3839-spve
- m3088-v
- m4317-plve
- p3268-lv
- m5074
- q1656-dle
- d4200-ve
- c1720
- p3905-r_mk_iii
- q6020-e
- p1475-le
- c1510
- m5000-g
- d2110-ve
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')
