← Back to search

CVE-2026-79844

10 CRITICAL

Published 2026-10-22 · Updated 2026-10-26

AI risk analysis

Summary
The AOS-10 interface contains an authentication bypass vulnerability (CWE-288) that, under specific preconditions outside the attacker’s control, allows unauthenticated remote command execution on the underlying host.
Exploitability
Exploitation requires meeting external preconditions not controllable by the attacker, making reliable exploitation unlikely without additional information or insider conditions.
Blast radius
If successfully exploited, an attacker could execute arbitrary commands on the host OS, potentially compromising confidentiality and integrity of the system, though availability impact is absent per CVSS.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
No fixed version is published in the description; disable the affected interface or restrict access to it until a patch is available.
auth-bypassrceremote-exploitaos-10cwe-288

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Weaknesses

CWE-288

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.