CVE-2026-79892 Authenticated Local Memory Corruption Vulnerability leads to Arbitrary Code Execution in AOS-8

A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute arbitrary code. Successful exploitation could allow the attacker to execute arbitrary code as a privileged user on the underlying operating system...

CVE-2024-25600-WordPress-Bricks-Builder-RCE-PoC

CVE-2024-25600 — WordPress Bricks Builder RCE PoC Unauthenticated remote code execution vulnerability in WordPress Bricks Builder id uid=33www-data gid=33www-data groups=33www-data References CVE-2024-25600 Bricks Builder Security Advisory Wordfence writeup Credits Discovery: Snicco / Calvin Alka...

CVE-2026-79891 Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8

A buffer overflow vulnerability exists in the command line interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to...

CVE-2025-8110

Gogs RCE Exploit CVE-2025-8110 Proof of Concept for CVE-2025-8110 - Remote Code Execution in Gogs via symlink bypass and sshCommand injection. Description This exploit abuses a symlink bypass in Gogs API to overwrite .git/config and inject malicious sshCommand that executes a reverse shell...

react2shell-scanner-CVE-2025-55182

React2Shell Enterprise Scanner High-fidelity vulnerability scanner for CVE-2025-55182 and CVE-2025-66478 - Remote Code Execution vulnerabilities in React Server Components / Next.js. 📖 For detailed technical analysis, exploit mechanics, and IOC data, seeSECURITY-RESEARCH.md ⚠️ DISCLAIMER This tool...

CVE-2026-79890

Technical details regarding CVE-2026-79890 are not publicly available in the provided documents. Action: monitor for updates.

CVE-2026-79890 Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol

There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating...

CVE-2026-79889 Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution

Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow by using specially crafted requests. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system,...

CVE-2026-79888 Unauthenticated Buffer Overflow allows Remote Code Execution in web interface

A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise...

CVE-2026-79887

CVE-2026-79887 involves an Authentication Bypass in the Web Interface of AOS-8 that allows for Remote Command Execution (RCE) . While the provided documents do not specify the exact root cause or affected versions, the vulnerability is assigned a High severity (CVSS 3.1 score of 8.1) with impacts...

CVE-2026-79882

CVE-2026-79882 identifies an Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10 . This vulnerability allows for unauthorized command execution via adjacent network access. The provided documents do not specify the exact root cause, specific affected versions, ...

CVE-2026-79881

Technical details for CVE-2026-79881 are not publicly available in the provided documents. While the title mentions an Authentication Bypass Leading to Remote Code Execution in AOS-8 , no specific root cause, impacted version, or remediation steps are provided. Monitor for updates.

CVE-2026-79879

CVE-2026-79879 identifies unauthenticated adjacent memory corruption vulnerabilities in AOS-10 . These flaws can lead to Remote Code Execution (RCE). The vulnerability is accessible via an adjacent attack vector with a CVSS v3.1 base score of 8.8 (HIGH) , potentially impacting confidentiality, in...

CVE-2026-79878

A vulnerability exists in the AOS-8 Command Line Interface when accessed by the PAPI Protocol . This unauthenticated adjacent command injection flaw allows an attacker to execute arbitrary commands. The impact is rated as High severity (CVSS 8.8) with significant effects on confidentiality, integ...

CVE-2026-79877

Technical details for CVE-2026-79877 are not publicly available in the provided documents. Monitor for further updates regarding this entry.

CVE-2026-79872

Technical details for CVE-2026-79872 are not publicly available in the provided documents. Action: monitor for updates.

CVE-2026-79865

CVE-2026-79865 identifies an unauthenticated adjacent memory corruption vulnerability in AOS-10 that can lead to Remote Code Execution . While specific technical root causes are not detailed, the vulnerability allows for remote exploitation. No specific exploit links or remediation details are pr...

CVE-2026-79863

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-79862

Technical details regarding the specific software, hardware, or root cause for CVE-2026-79862 are not publicly available in the provided documents. While the title suggests an Unauthenticated Adjacent Buffer Overflow leading to Remote Code Execution , no further specifics on affected components o...

CVE-2026-79861

CVE-2026-79861 identifies an unauthenticated command injection vulnerability within the PAPI Protocol of AOS-10 . Although the provided documents do not include specific technical details regarding the root cause, affected versions, or remediation steps, the vulnerability is classified as CRITICA...