CVE-2019-11859 February 26, 2023 by A buffer overflow exists in the SMS handler API of ALEOS before 4.13.0, 4.9.5, 4.9.4 that may allow code execution as root.
CVE-2019-11862 February 26, 2023 by The SSH service on ALEOS before 4.12.0, 4.9.5, 4.4.9 allows traffic proxying.