← Back to search

CVE-2026-79868

9.6 CRITICAL

Published 2026-10-22 · Updated 2026-10-26

AI risk analysis

Summary
An authentication bypass flaw in AOS-8 allows unauthenticated adjacent attackers to circumvent existing authentication controls, potentially granting full administrative access and enabling complete system compromise including data theft and configuration tampering.
Exploitability
Exploitation requires the attacker to be on the same adjacent network segment with no authentication or user interaction needed, making it highly exploitable in insider or compromised-physical-access scenarios.
Blast radius
Successful exploitation leads to full system compromise: attackers can execute arbitrary commands, modify critical configurations, and exfiltrate sensitive data without detection under administrative privileges.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to AOS-8 version 2.590 or later, as this is the fixed version that addresses CVE-2026-79868.
auth-bypassadjacentadmin-accessaos-8

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data, leading to complete compromise of the affected system.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.