CVE-2025-37176 — Authenticated Command Injection Vulnerability in an AOS-8 operating system's internal workflow
A command injection vulnerability in AOS-8 allows an authenticated privileged user to alter a package header to inject shell commands, potentially affecting the execution of int…
Published: 2026-01-13 · CVSS: 6.5 · CVSS 3.1
A command injection vulnerability in AOS-8 allows an authenticated privileged user to alter a package header to inject shell commands, potentially affecting the execution of internal operations. Successful exploit could allow an authenticated malicious actor to execute commands with the privileges of the impacted mechanism.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7