CVE Catalog

CVE-2026-44871

High
Published: Translated: NVD NIST

Summary

Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

Risk Assessment

Exploitation of these vulnerabilities may lead to serious security breaches, allowing an attacker full control over the operating system. This poses a risk of data loss and unauthorized access to organizational resources.

Recommendation

It is recommended to update AOS-8 and AOS-10 systems to the latest versions that address these vulnerabilities. Additionally, access to the CLI should be restricted to trusted users.

Other vulnerabilities in AOS-8 i AOS-10 Operating Systems

Original NVD description (English source)

Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS