CVE-2026-65184
Vertiv Avocent ACS8000
Published 26 Oct 2026 · updated 26 Oct 2026 · Deferred
9.8 Critical · CVSS 3.1, CNA
Description
The root-privileged `wsserver` terminal-bridge daemon builds a shell command from client-supplied WebSocket fields and passes it to `system()` and `popen()` without quoting, escaping, or character-set validation. The daemon's public-key session path performs no appliance-session check.