Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.2

AOS-8 and AOS-10 Management Interface Upload Risk

CVE-2026-44854 · published 5 months ago
Summary

AOS-8 and AOS-10 management interfaces have a security weakness that could allow an authorized but malicious user to upload unauthorized files, potentially giving them control over the system. This could lead to serious security issues, including unauthorized access and data breaches. To mitigate this risk, update your AOS-8 and AOS-10 systems with the latest security patches as soon as possible.

Original advisory text
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to upload a...
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to upload arbitrary files to the underlying operating system, potentially leading to remote code execution as a privileged user.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.2 High
Exploitation
1% chance of attack within 30 days
Type
CWE-77Command Injection
Timeline
Published12 May 2026
Updated31 Oct 2026
First seen12 May 2026
Sources
CVE-2026-44854 · NVD
Track software like this
Free during beta