Notcve Critical SQL Injection Vulnerabilities in AOS-8 and AOS-10 Exposed
Article Content
- •CVE-2026-44861 exposes SQL injection vulnerabilities in AOS-8 and AOS-10.
- •Authenticated attackers can exploit these vulnerabilities to execute arbitrary commands.
- •No patches have been reported as of the latest updates on 2026-07-14.
CVE-2026-44861 details SQL injection vulnerabilities in AOS-8 and AOS-10 command-line interfaces. These vulnerabilities allow authenticated attackers with administrative privileges to inject malicious input into unsanitized parameters, potentially executing arbitrary commands on the underlying operating system. The vulnerabilities affect several underlying service components, posing a significant risk to systems utilizing these interfaces. The CVE was published on 2026-05-12, and as of now, no patches have been reported. Organizations using AOS-8 and AOS-10 are advised to assess their exposure and implement necessary security measures.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track CVE-2026-44861 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…