CVE-2026-8652
Command Injection Vulnerability in NEC Aterm Web Console
An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product’s web console, they may be able to execute arbitrary OS commands via adjacent network.
CVSS 4.0 · 8.5 High
EPSS < 1%
KEV · Not listed
Vendors
Products