CVE-2026-44872: Authenticated Arbitrary File Upload via Command Injection in AOS-8 AND AOS-10 Web-Based Management Interface
A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to place arbitrary files on the underlying filesystem of the affected device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44872?
CVE-2026-44872 has a high severity rating due to its potential for allowing remote code execution through command injection.
How do I fix CVE-2026-44872?
To fix CVE-2026-44872, it is recommended to update to the latest patched versions of AOS-8 and AOS-10 operating systems.
Who is affected by CVE-2026-44872?
CVE-2026-44872 affects users of the AOS-8 and AOS-10 operating systems that utilize the web-based management interface.
What type of vulnerability is CVE-2026-44872?
CVE-2026-44872 is classified as an authenticated arbitrary file upload vulnerability via command injection.
Can CVE-2026-44872 be exploited remotely?
Yes, CVE-2026-44872 can be exploited remotely by authenticated attackers, allowing them to upload arbitrary files.