CVE-2026-79849

Summary

An unauthenticated remote SQL injection vulnerability in AOS-8 allows attackers to manipulate database queries, potentially leading to unauthorized data access or arbitrary command execution on the underlying OS.

Exploitability

Exploitation is straightforward for remote attackers due to lack of authentication, pre-authentication access, and no user interaction required.

Blast radius

Successful exploitation could lead to full system compromise including confidentiality, integrity, and availability impacts across the affected AOS-8 instance and potentially connected infrastructure.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to AOS-8 patched version as specified by vendor advisory; if no fixed version is published, disable the affected interface or restrict access to trusted networks only.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.