CVE-2026-95707

CVE-2026-95707 · Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

CVSS 7.2 · High · EPSS 0.4%

Published

2026-10-22T19:06:54.542Z

Updated

2026-10-23T19:14:05.739Z

Check your server →