CVE-2026-65184EUVD-2026-109933GHSA-F563-J7VJ-6J8F
Avocent ACS8000 wsserver command injection
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
CISA SSVC
- Exploitation: none
- Automatable: yes
- Technical impact: total
?
Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).
SSVC documentationSummary
The Avocent ACS8000 console server firmware is affected through its wsserver terminal-bridge service, which runs with root privileges. An unauthenticated remote attacker could potentially inject operating system commands through crafted WebSocket requests, gaining full control of the appliance.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
The root-privileged `wsserver` terminal-bridge daemon builds a shell command from client-supplied WebSocket fields and passes it to `system()` and `popen()` without quoting, escaping, or character-set validation. The daemon's public-key session path performs no appliance-session check.
Affected versions
- Vertiv Avocent ACS8000
through 2.32.4