CVE-2026-8652: Nec Platforms, Ltd Aterm CM51FD

High severity, CVSS 8.5. EPSS: 1.4% chance of exploitation in the next 30 days.

An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product’s web console, they may be able to execute arbitrary OS commands via adjacent network.

Affected products

• Nec Platforms, Ltd Aterm CM51FD: before 1.2.0 (fixed in 1.2.0)
• Nec Platforms, Ltd Aterm MR51FN: before 3.4.0 (fixed in 3.4.0)

Published 2026-05-25. Last modified 2026-07-23.