CVE-2026-8652
An OS Command Injection vulnerability exists in Aterm.
Published May 25, 2026 · updated Jul 23, 2026
An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product’s web console, they may be able to execute arbitrary OS commands via adjacent network.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 25, 2026 · NIST NVD
Detected
An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product’s web console, they may be able to execute arbitrary OS commands via adjacent network.
Jul 23, 2026 · NIST NVD
Updated
An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product’s web console, they may be able to execute arbitrary OS commands via adjacent network.
Sources
- CVE.orgVulnerability recordCVE-2026-8652
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-8652
An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product’s web console, they may be able to execute arbitrary OS commands via adjacent network.
nvd.nist.gov