CVE-2026-44874: Authenticated Arbitrary File Download via AOS-10 Web-Based Management Interface
A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenticated remote attacker to access sensitive files on the underlying operating system. Successful exploitation of this vulnerability could result in the disclosure of confidential system information, potentially enabling further attacks against the affected device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44874?
CVE-2026-44874 is considered a high-severity vulnerability due to the potential for authenticated attackers to access sensitive files.
How do I fix CVE-2026-44874?
To fix CVE-2026-44874, update the AOS-10 Gateway to the latest version provided by the vendor.
Who is affected by CVE-2026-44874?
The vulnerability affects users of the AOS-10 Gateway with access to the web-based management interface.
What type of attack is associated with CVE-2026-44874?
CVE-2026-44874 allows remote authenticated attackers to perform an arbitrary file download.
What could happen if CVE-2026-44874 is exploited?
Exploitation of CVE-2026-44874 could lead to unauthorized access to sensitive files on the underlying operating system.