CVE-2026-79864

Summary

Command injection flaw in AOS-10's affected interface allows unauthenticated adjacent attackers to execute arbitrary privileged commands on the underlying OS by injecting shell metacharacters into vulnerable input.

Exploitability

Exploitation requires network proximity (adjacent layer 2) and no authentication, but success depends on the specific vulnerable endpoint and input validation weakness.

Blast radius

Successful exploitation grants full system compromise with root-level privileges, enabling data theft, lateral movement, or persistent backdoor installation across the local network segment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to AOS-10 version 2.590 or later, as this is the fixed version specified in vendor advisories for CVE-2026-79864.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.