Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-95721 | low | 3.3 | No | A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticate... | 2026-10-26 |
| CVE-2026-95720 | medium | 4.4 | No | A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of ser... | 2026-10-26 |
| CVE-2026-95719 | medium | 4.9 | No | An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an authenticated attacker with admi... | 2026-10-26 |
| CVE-2026-95718 | medium | 5.3 | No | An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote attacker to circumvent existing a... | 2026-10-26 |
| CVE-2026-95717 | medium | 5.5 | No | A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that could allow an authenticated remo... | 2026-10-26 |
| CVE-2026-95716 | medium | 6.5 | No | An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication co... | 2026-10-26 |
| CVE-2026-95715 | medium | 6.8 | No | An unauthenticated command injection vulnerability exists in the command line interface of AOS-10. Successful exploitation could allow an at... | 2026-10-26 |
| CVE-2026-95714 | medium | 6.8 | No | A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achi... | 2026-10-26 |
| CVE-2026-95713 | high | 7.0 | No | An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unaut... | 2026-10-26 |
| CVE-2026-95712 | high | 7.1 | No | A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access li... | 2026-10-26 |
| CVE-2026-95711 | high | 7.1 | No | An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to c... | 2026-10-26 |
| CVE-2026-95710 | high | 7.1 | No | An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthentic... | 2026-10-26 |
| CVE-2026-95709 | high | 7.2 | No | Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high priv... | 2026-10-26 |
| CVE-2026-95708 | high | 7.2 | No | Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high priv... | 2026-10-26 |
| CVE-2026-95707 | high | 7.2 | No | A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve r... | 2026-10-26 |
| CVE-2026-95706 | high | 7.2 | No | Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to pe... | 2026-10-26 |
| CVE-2026-95705 | high | 7.2 | No | Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to pe... | 2026-10-26 |
| CVE-2026-95704 | high | 7.2 | No | A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated remote attacker to... | 2026-10-26 |
| CVE-2026-79956 | high | 7.2 | No | A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote attacker to execute arbitrary com... | 2026-10-26 |
| CVE-2026-79955 | high | 7.5 | No | An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8 that could allow an unauthent... | 2026-10-26 |