CVE-2026-95713

HighCVSS 7.0/10Last modified Oct 23, 2026

Description

An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected interface, along with limited access to or modification of some system data.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Weakness enumeration

CWE-119

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 22, 2026
Last modified
Oct 23, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-957146.8A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achiCVE-2026-957156.8An unauthenticated command injection vulnerability exists in the command line interface of AOS-10. Successful exploitation could allow an atCVE-2026-957166.5An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication coCVE-2026-957175.5A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that could allow an authenticated remoCVE-2026-957185.3An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote attacker to circumvent existing aCVE-2026-957194.9An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an authenticated attacker with admiCVE-2026-95725.5A security vulnerability has been detected in GPAC up to 2.4.0. Affected by this issue is the function Media_GetSample of the file src/isomeCVE-2026-957204.4A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of serCVE-2026-957213.3A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticateCVE-2026-95737.3A vulnerability was detected in itsourcecode Student Transcript Processing System 1.0. This affects an unknown part of the file /admin/modulCVE-2026-95747.3A flaw has been found in itsourcecode Student Transcript Processing System 1.0. This vulnerability affects unknown code of the file /admin/mCVE-2026-95757.3A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0. This issue affects some unknown processing of the f