Vulnerability intelligence

Explore. Understand.
Stay ahead.

A clearer way to explore known software vulnerabilities. Search CVE records, review severity and CVSS scores, and keep track of the issues that matter to you.

Independent vulnerability information and monitoring project

Search the vulnerability database

Find a CVE by ID, keyword, severity or CVSS score.

Centralized CVE data
Browse vulnerability records collected from public sources.
Severity at a glance
Compare severity levels and available CVSS scores.
Personal email alerts
Create alert preferences for critical issues and custom matches.
Browse the database

Latest vulnerability records

45 710
matching records · page 313 of 1829
CVE-2026-95716 MEDIUM CVSS 6.53.1

An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to change the state of certain settings of a vulnerable system.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-95715 MEDIUM CVSS 6.83.1

An unauthenticated command injection vulnerability exists in the command line interface of AOS-10. Successful exploitation could allow an attacker with physical access to execute arbitrary commands as a privileged user on the underlying operating system leading to complete system compromise.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-95714 MEDIUM CVSS 6.83.1

A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-95713 HIGH CVSS 7.03.1

An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected interface, along with limited access to or modification of some system data.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-95712 HIGH CVSS 7.13.1

A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information handled by the affected service. Successful exploitation could allow an attacker to view some information and to disrupt the availability of the affected service.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-95711 HIGH CVSS 7.13.1

An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-95710 HIGH CVSS 7.13.1

An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected system, with a limited impact to the integrity of the affected component.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-95709 HIGH CVSS 7.23.1

Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-95708 HIGH CVSS 7.23.1

Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-95707 HIGH CVSS 7.23.1

A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-95706 HIGH CVSS 7.23.1

Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying operating system.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-95705 HIGH CVSS 7.23.1

Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying operating system.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-95704 HIGH CVSS 7.23.1

A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated remote attacker to execute remote code. Successful exploitation could enable an attacker to execute arbitrary commands on the underlying operating system, potentially compromising system integrity and data security.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-79956 HIGH CVSS 7.23.1

A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system. Successful exploitation could allow an attacker to run unauthorized commands on the system, potentially leading to system compromise.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-79955 HIGH CVSS 7.53.1

An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8 that could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected service.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-79895 HIGH CVSS 7.53.1

Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected interface.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-79894 HIGH CVSS 7.53.1

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation of this vulnerability results in the ability to disrupt the availability of the affected interface.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-79893 HIGH CVSS 7.53.1

Memory corruption vulnerabilities in AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected service.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-79892 HIGH CVSS 7.83.1

A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute arbitrary code. Successful exploitation could allow the attacker to execute arbitrary code as a privileged user on the underlying operating system.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-79891 HIGH CVSS 8.13.1

A buffer overflow vulnerability exists in the command line interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system leading to complete system compromise.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-79890 HIGH CVSS 8.13.1

There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-79889 HIGH CVSS 8.13.1

Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow by using specially crafted requests. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-79888 HIGH CVSS 8.13.1

A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-79887 HIGH CVSS 8.13.1

A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could lead to complete device control, enabling interception of network traffic and potential compromise of connected systems.

Published: 22 Oct 2026 Updated: 26 Oct 2026 View details →
CVE-2026-79886 HIGH CVSS 8.23.1

An unauthenticated buffer overflow vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected service on the controller, with a limited impact to its integrity.

Published: 22 Oct 2026 Updated: 02 Nov 2026 View details →