333945 matches found
CVE-2026-79890
Technical details regarding CVE-2026-79890 are not publicly available in the provided documents. Action: monitor for updates.
CVE-2026-79890 Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol
There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating...
CVE-2026-79890 Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol
There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating...
CVE-2026-79889 Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution
Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow by using specially crafted requests. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system,...
CVE-2026-79889 Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution
Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow by using specially crafted requests. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system,...
CVE-2026-79888 Unauthenticated Buffer Overflow allows Remote Code Execution in web interface
A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise...
CVE-2026-79888 Unauthenticated Buffer Overflow allows Remote Code Execution in web interface
A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise...
CVE-2026-79887
CVE-2026-79887 involves an Authentication Bypass in the Web Interface of AOS-8 that allows for Remote Command Execution (RCE) . While the provided documents do not specify the exact root cause or affected versions, the vulnerability is assigned a High severity (CVSS 3.1 score of 8.1) with impacts...
CVE-2026-79882 Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10
There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead to unauthenticated remote code execution by an adjacent attacker sending specially crafted packets. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code as a...
CVE-2026-79882
CVE-2026-79882 identifies an Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10 . This vulnerability allows for unauthorized command execution via adjacent network access. The provided documents do not specify the exact root cause, specific affected versions, ...
CVE-2026-79881 Authentication Bypass Leading to Remote Code Execution in AOS-8
An authentication bypass vulnerability in the underlying operating system of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying...
CVE-2026-79880 Authenticated Server-Side Request Forgery leads to Remote Code Execution in AOS-8
A vulnerability in the command line interface of AOS-8 could allow an authenticated remote attacker with high privileges to conduct a server-side request forgery SSRF attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...
CVE-2026-79879
CVE-2026-79879 identifies unauthenticated adjacent memory corruption vulnerabilities in AOS-10 . These flaws can lead to Remote Code Execution (RCE). The vulnerability is accessible via an adjacent attack vector with a CVSS v3.1 base score of 8.8 (HIGH) , potentially impacting confidentiality, in...
CVE-2026-79879 Unauthenticated Adjacent Memory Corruption Vulnerabilities lead to Remote Code Execution in AOS-10
Memory corruption vulnerabilities in the affected interface of AOS-10 could lead to remote code execution by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system...
CVE-2026-79878 Unauthenticated Adjacent Command Injection Vulnerability in the AOS-8 Command Line Interface Accessed by the PAPI Protocol
A command injection vulnerability in the AOS-8 command line interface accessed by the PAPI protocol could lead to unauthenticated remote code execution by an adjacent attacker sending specially crafted PAPI packets destined to the PAPI UDP port 8211. Successful exploitation could allow an attacke...
CVE-2026-79878
A vulnerability exists in the AOS-8 Command Line Interface when accessed by the PAPI Protocol . This unauthenticated adjacent command injection flaw allows an attacker to execute arbitrary commands. The impact is rated as High severity (CVSS 8.8) with significant effects on confidentiality, integ...
CVE-2026-79877
Technical details for CVE-2026-79877 are not publicly available in the provided documents. Monitor for further updates regarding this entry.
CVE-2026-79877 Unauthenticated Adjacent Remote Code Execution Vulnerability in AOS-10
A remote code execution vulnerability in the underlying operating system of AOS-10 could allow an unauthenticated adjacent attacker to execute arbitrary code on an affected device. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying...
CVE-2026-79872 Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8
A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an unauthenticated remote attacker. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on t...