CVE-2026-79846

Summary

Command injection flaw in AOS-8's affected interface allows unauthenticated remote attackers to execute arbitrary commands on the underlying OS if specific preconditions—outside the attacker’s control—are met, risking full system compromise.

Exploitability

Exploitation requires meeting preconditions beyond the attacker’s control, making reliable exploitation difficult without additional information or access.

Blast radius

Successful exploitation grants full remote code execution on the host, enabling complete data theft, system takeover, and lateral movement within the network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to AOS-8 version 2.590 or later, as this is the fixed version specified in the vendor advisory.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.