CVE-2026-79852

Summary

The AOS web-based management interface contains an SQL injection vulnerability (CWE-89) that allows unauthenticated remote attackers to inject malicious SQL queries, potentially leading to arbitrary command execution on the underlying OS.

Exploitability

Exploitation is straightforward for remote attackers due to lack of authentication requirements and low attack complexity.

Blast radius

Successful exploitation could result in full system compromise including confidentiality, integrity, and availability impacts across the AOS instance and potentially connected infrastructure.

Detection

Look for SQL injection patterns in HTTP request parameters targeting the web-based management interface, such as single quotes, UNION SELECT statements, or time-based blind payloads (e.g., SLEEP(), BENCHMARK()) in access logs or WAF alerts.

Prioritized remediation

Upgrade to AOS version 2.590 or later, as this is the fixed version that addresses CVE-2026-79852.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.