CVE-2026-44872

Name of the Vulnerable Software and Affected Versions AOS-8 (affected versions not specified) AOS-10 (affected versions not specified)

Description A command injection flaw in the web-based management interface allows an authenticated remote attacker to place arbitrary files on the underlying filesystem of the device. Command injection is a type of attack where an attacker executes arbitrary operating system commands on a server by exploiting a vulnerability in an application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.