CVE-2026-95715
An unauthenticated command injection vulnerability exists in the command line interface of AOS-10. Successful exploitation could allow an at
CVSS
6.8
Medio
EPSS
0.2%
p5
KEV
—
Exploit Today
1
0-100
Publicado: 22 oct 2026 · Última mod.: 23 oct 2026 · CWE-77
Sin historial EPSS suficiente todavía.
An unauthenticated command injection vulnerability exists in the command line interface of AOS-10. Successful exploitation could allow an attacker with physical access to execute arbitrary commands as a privileged user on the underlying operating system leading to complete system compromise.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1050149.1 CRÍ51.3%
——15Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.11hCVE-2026-957097.2 ALT29.4%
——9Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.11hCVE-2026-957087.2 ALT29.4%
——9Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.11hCVE-2026-957067.2 ALT26.5%
——8Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying operating system.11hCVE-2026-957057.2 ALT26.5%
——8Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying operating system.11hCVE-2026-799567.2 ALT26.5%
——8A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system. Successful exploitation could allow an attacker to run unauthorized commands on the system, potentially leading to system compromise.11h