CVE-2026-79870

Summary

An authentication bypass in AOS-8's PAPI protocol allows unauthenticated adjacent attackers to gain administrative access by circumventing existing authentication controls.

Exploitability

Exploitation requires the attacker to be on the same adjacent network segment (e.g., same LAN or wireless subnet) with no authentication required.

Blast radius

Successful exploitation grants full administrative control, enabling data theft, configuration changes, and service disruption across affected systems.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to AOS-8 version 2.590 or later, as this is the fixed version specified in the CVE description.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.