CVE-2026-79850

Summary

An authentication bypass vulnerability in AOS-8 allows unauthenticated remote attackers to execute arbitrary commands as root on the underlying host, leading to full system compromise.

Exploitability

Exploitation requires no authentication or user interaction and likely leverages flawed access control logic in a network-exposed interface.

Blast radius

Successful exploitation grants full root-level control of the affected device, enabling complete data exfiltration, persistence, or lateral movement within the infrastructure.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to AOS-8 patch level 2.590 or later, as specified in the vendor advisory; if no fixed version is published, disable the affected interface and restrict access to the named endpoint pending further guidance.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.