CVE-2026-79868
9.6 CRITICALPublished 2026-10-22 · Updated 2026-10-26
AI risk analysis
- Summary
- An authentication bypass flaw in AOS-8 allows unauthenticated adjacent attackers to circumvent existing authentication controls, potentially granting full administrative access and enabling complete system compromise including data theft and configuration tampering.
- Exploitability
- Exploitation requires the attacker to be on the same adjacent network segment with no authentication or user interaction needed, making it highly exploitable in insider or compromised-physical-access scenarios.
- Blast radius
- Successful exploitation leads to full system compromise: attackers can execute arbitrary commands, modify critical configurations, and exfiltrate sensitive data without detection under administrative privileges.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to AOS-8 version 2.590 or later, as this is the fixed version that addresses CVE-2026-79868.
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data, leading to complete compromise of the affected system.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-79870
- CRITICALCVE-2026-79874
- CRITICALCVE-2026-79875
- CRITICALCVE-2026-105278PoC
- HIGHCVE-2026-110616PoC
- CRITICALCVE-2026-111673PoC
- CRITICALCVE-2026-111690PoC
- CRITICALCVE-2026-111708PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.