CVE-2026-79854

Summary

AOS-10 contains an SQL injection vulnerability in an affected interface that allows unauthenticated remote attackers to inject malicious SQL queries, potentially leading to arbitrary command execution on the underlying OS.

Exploitability

Exploitation is straightforward for remote attackers due to lack of authentication and low attack complexity.

Blast radius

Successful exploitation could result in full system compromise including confidentiality, integrity, and availability loss across the AOS-10 instance and potentially connected systems.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to AOS-10 version 2.590 or later, as this is the fixed version specified by the vendor.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.