CVE-2026-115365

OpenBao from 2.3.0 before 2.6.3 contains an incorrect authorization vulnerability in its ACL policy cache that allows tokens to reference policies from arbitrary namespaces using specially crafted policy names. Attackers holding such tokens can gain capabilities of cached policies in other...

CVE-2026-95721

CVE-2026-95721 involves an Authenticated Local Memory Corruption Vulnerability within the AOS-8 Web-Based Management Interface . Technical details regarding the specific root cause, affected versions, and practical impact are not provided in the documents. No information regarding exploits or rem...

CVE-2026-95721 Authenticated Local Memory Corruption Vulnerability in AOS-8 Web-Based Management Interface

A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with local access to view some system files and interrupt the normal operation of the affected service...

CVE-2026-95721 Authenticated Local Memory Corruption Vulnerability in AOS-8 Web-Based Management Interface

A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with local access to view some system files and interrupt the normal operation of the affected service...

CVE-2026-95720

The AOS-8 operating system is affected by an authenticated local buffer overflow vulnerability (CVE-2026-95720). This flaw can lead to a Denial-of-Service (DoS) condition. While the specific vulnerable component is not detailed in the provided documents, the vulnerability requires local access an...

CVE-2026-95720 Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8

A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network...

CVE-2026-95720 Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8

A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network...

CVE-2026-95715 Unauthenticated Local Command Injection Vulnerability in AOS-10 Command Line Interface

An unauthenticated command injection vulnerability exists in the command line interface of AOS-10. Successful exploitation could allow an attacker with physical access to execute arbitrary commands as a privileged user on the underlying operating system leading to complete system compromise...

CVE-2026-79875 Authentication Bypass in the PAPI Protocol of AOS-8 Allows Unauthorized Administrative Access

A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and acce...

CVE-2026-79875

CVE-2026-79875 involves an Authentication Bypass in the PAPI Protocol of AOS-8 . This vulnerability allows an attacker to gain unauthorized administrative access . While the CVSS score is 9.3 (Critical) with an Adjacent attack vector and High impact on confidentiality and integrity, the provided ...

CVE-2026-79874 Authentication Bypass in the API allows Administrative Access of AOS-10

An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data...

CVE-2026-79874

CVE-2026-79874 involves an Authentication Bypass in the API of AOS-10 , which can allow an attacker to gain Administrative Access . The CVSS 3.1 score is 9.3 (CRITICAL) , with an Adjacent attack vector and Low complexity. Technical details regarding the specific root cause or remediation are not ...

CVE-2026-79873 Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative Access

Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipula...

CVE-2026-79873

A vulnerability exists in the PAPI Protocol of AOS-10 that allows for unauthenticated adjacent authentication bypasses . This flaw can lead to unauthorized administrative access . While the CVSS score indicates a CRITICAL severity (9.3) with high confidentiality and integrity impact, specific det...

CVE-2026-79870

Technical details regarding the root cause, specific components, or impacted versions for CVE-2026-79870 are not publicly available in the provided documents. While the CVE title mentions an Authentication Bypass leading to Unauthorized Access in AOS-8 , no further technical specifics or remediat...

CVE-2026-79870 Authentication Bypass leads to Unauthorized Access in AOS-8

An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, access or manipulate...

CVE-2026-79868

Technical details regarding CVE-2026-79868 are not publicly available in the provided documents. While the title suggests Authentication Bypass Vulnerabilities leading to Complete System Compromise in AOS-8 , the description contains no concrete technical details. Monitor for updates.

CVE-2026-79868 Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8

Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or...

CVE-2026-79856 Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8

A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or...

CVE-2026-79856 Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8

A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or...