VulnSocial

CVE-2026-65184

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The root-privileged `wsserver` terminal-bridge daemon builds a shell command from client-supplied WebSocket fields and passes it to `system()` and `popen()` without quoting, escaping, or character-set validation. The daemon's public-key session path performs no appliance-session check.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-10-26: 210-26
Referenced assets1 URL
Full discourse2 posts
  • Parameter Watch@ParameterWatch

    ⚠️ CVE-2026-65184 (9.8) ⚠️ wsserver, the root-privileged daemon that bridges terminal sessions, lets a connected client run commands on the appliance as root. No fixed version is named yet. https://t.co/z5fILkGAZd

    1001025
    21 followersView on X
  • Eliran Emuna@EmunaEliran

    🚨 Avocent ACS8000 console servers: unauth root RCE (CVE-2026-65184) ⚠️ CVSS 3.1 9.8 (CNA). WebSocket input hits system() unescaped 🎯 Needs only reach to the web port 📦 ≤2.32.4. Fix not yet published ✅ Not in KEV 🔗 https://www.runzero.com/advisories/avocent-acs8000-wsserver-cmdinj-cve-2026-65184 #CyberSecurity #CVE https://t.co/coMDKWt9R8

    0000026
    74 followersView on X

Explore more

Back to dashboard