CVE-2026-8652

HighCVSS 8.5

Published: 25/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.72%

50th percentile - higher than 50% of all known CVEs

Summary

An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product's web console, they may be able to execute arbitrary OS commands via adjacent network.

Risk Assessment

The risk is that an attacker with administrative access to the web console can fully compromise the device, potentially leading to integrity and confidentiality breaches.

Recommendation

Restrict access to the Aterm web console and implement strong authentication mechanisms.

Other vulnerabilities in Aterm

CVE-2026-6059Medium
A cross-site scripting vulnerability exists in Aterm. Arbitrary scripts may be executed in the web browser of a user accessing the web management interface via adjacent network.

Original NVD description (English source)

An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product’s web console, they may be able to execute arbitrary OS commands via adjacent network.