Critical SQL Injection Vulnerabilities in AOS-8 and AOS-10 Exposed

CVE-2026-44861 details SQL injection vulnerabilities in AOS-8 and AOS-10 command-line interfaces. These vulnerabilities allow authenticated attackers with administrative privileges to inject malicious input into unsanitized parameters, potentially executing arbitrary commands on the underlying operating system. The vulnerabilities affect several underlying service components, posing a significant risk to systems utilizing these interfaces. The CVE was published on 2026-05-12, and as of now, no patches have been reported. Organizations using AOS-8 and AOS-10 are advised to assess their exposure and implement necessary security measures.

Key Points: • CVE-2026-44861 exposes SQL injection vulnerabilities in AOS-8 and AOS-10. • Authenticated attackers can exploit these vulnerabilities to execute arbitrary commands. • No patches have been reported as of the latest updates on 2026-07-14.