CVE-2026-79854 — Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10
A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS-10 instance. Successful explo…
Published: 2026-10-22 · CVSS: 9.8 · CVSS 3.1
A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS-10 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
Source: CVE Program · Revision b3deaa7e6b91db76c3fd9a293f986425b1198aec