CVE-2026-63454
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
An authenticated path traversal vulnerability in AOS-CX allows copying arbitrary files to a user-readable location from the CLI of the underlying OS, potentially leading to remote code execution.
Risk Assessment
The organization is at risk of unauthorized access to sensitive files and potential system takeover via remote code execution.
Recommendation
Immediately update AOS-CX to the latest patched version and restrict CLI access to trusted users only.
Other vulnerabilities in AOS-CX
See all- CVE-2026-63453High
Buffer overflow vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow a remote high-privileged user to execute arbitrary code as a privileged user on the underlying operating system.
- CVE-2026-44880High
A buffer overflow vulnerability was found in the command line interface of AOS-CX. Successful exploitation could allow a remote low-privileged user to execute arbitrary code as a privileged user on the underlying operating system.
Original NVD description (English source)
An authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to remote code execution.