CVE-2025-27083

Summary

CVE-2025-27083 is a critical vulnerability affecting the AOS-10 GW and AOS-8 Controller/Mobility Conductor web-based management interfaces. This issue allows authenticated attackers to inject and execute arbitrary commands as a privileged user on the underlying operating system. Successfully exploiting these authenticated command injection vulnerabilities can result in significant system compromises and potential data breaches. Organizations utilizing these devices are urged to apply the available patches as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.