CVE-2026-44880
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
A buffer overflow vulnerability was found in the command line interface of AOS-CX. Successful exploitation could allow a remote low-privileged user to execute arbitrary code as a privileged user on the underlying operating system.
Risk Assessment
An attacker can gain full control over the network device, leading to compromise of confidentiality, integrity, and availability of data and the entire network.
Recommendation
Apply the AOS-CX software update provided by the vendor. Restrict CLI access to trusted administrators only.
Other vulnerabilities in AOS-CX
See all- CVE-2026-63454High
An authenticated path traversal vulnerability in AOS-CX allows copying arbitrary files to a user-readable location from the CLI of the underlying OS, potentially leading to remote code execution.
- CVE-2026-63453High
Buffer overflow vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow a remote high-privileged user to execute arbitrary code as a privileged user on the underlying operating system.
Original NVD description (English source)
A buffer overflow vulnerability was found in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow an remote low-privileged user to execute arbitrary code as a privileged user on the underlying operating system.