CVE-2026-95704

HighCVSS 7.2/10Last modified Oct 24, 2026

Description

A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated remote attacker to execute remote code. Successful exploitation could enable an attacker to execute arbitrary commands on the underlying operating system, potentially compromising system integrity and data security.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published: Oct 22, 2026
Last modified: Oct 24, 2026
NVD status: Received

Related CVEs from 2026

CVE-2026-957057.2Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to pe CVE-2026-957067.2Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to pe CVE-2026-957077.2A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve r CVE-2026-957087.2Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high priv CVE-2026-957097.2Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high priv CVE-2026-95716.5Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to invalidate OAuth refresh tokens upon user account deacti CVE-2026-957107.1An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthentic CVE-2026-957117.1An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to c CVE-2026-957127.1A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access li CVE-2026-957137.0An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unaut CVE-2026-957146.8A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achi CVE-2026-957156.8An unauthenticated command injection vulnerability exists in the command line interface of AOS-10. Successful exploitation could allow an at