CVE-2026-79844
10 CRITICALPublished 2026-10-22 · Updated 2026-10-26
AI risk analysis
- Summary
- The AOS-10 interface contains an authentication bypass vulnerability (CWE-288) that, under specific preconditions outside the attacker’s control, allows unauthenticated remote command execution on the underlying host.
- Exploitability
- Exploitation requires meeting external preconditions not controllable by the attacker, making reliable exploitation unlikely without additional information or insider conditions.
- Blast radius
- If successfully exploited, an attacker could execute arbitrary commands on the host OS, potentially compromising confidentiality and integrity of the system, though availability impact is absent per CVSS.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- No fixed version is published in the description; disable the affected interface or restrict access to it until a patch is available.
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Weaknesses
CWE-288
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-79850
- HIGHCVE-2026-70229
- CRITICALCVE-2026-104075
- CRITICALCVE-2026-107656
- CRITICALCVE-2026-79855
- HIGHCVE-2022-51019PoC
- HIGHCVE-2025-51457
- CRITICALCVE-2025-66455PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.