Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
References
Configurations
No configuration.
History
30 Oct 2026, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-77 |
23 Oct 2026, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system. |
22 Oct 2026, 19:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-22 19:17
Updated : 2026-10-30 20:17
NVD link : CVE-2026-79846
Mitre link : CVE-2026-79846
CVE.ORG link : CVE-2026-79846
JSON object : View
Products Affected
No product.
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')