CVE-2026-44853
HighSummary
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to upload arbitrary files to the underlying operating system, potentially leading to remote code execution as a privileged user.
Risk Assessment
The organization may face serious security threats, including the possibility of remote code execution by an attacker, which could lead to data loss or system takeover.
Recommendation
It is recommended to update AOS-8 and AOS-10 systems to the latest versions and implement additional security measures such as access monitoring and user privilege restrictions.
Other vulnerabilities in AOS-8 i AOS-10 Operating Systems
Original NVD description (English source)
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to upload arbitrary files to the underlying operating system, potentially leading to remote code execution as a privileged user.