Sierra Wireless AirLink ALEOS contains an unrestricted upload vulnerability allowing attackers to upload executable files via specially crafted HTTP requests. The vulnerability requires authentication but can result in code execution on the webserver. The affected product may be end-of-life or end-of-service, and users are advised to discontinue use. This is a critical vulnerability that allows remote code execution through file upload functionality.