CVE-2026-79855

Summary

An authentication bypass in the SSH daemon of AOS-8 lets unauthenticated remote attackers circumvent login controls and gain administrative access, enabling full system compromise.

Exploitability

Exploitation is highly feasible due to the lack of authentication requirement and low attack complexity (CVSS AV:N/AC:L/PR:N/UI:N).

Blast radius

Successful exploitation grants full administrative control over the AOS-8 host, risking data theft, system takeover, and lateral movement within the network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to AOS-8 version 2.590 or later, as this is the fixed version specified in the CVE description.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.