CVE-2026-79873

Summary

AOS-10's PAPI protocol contains authentication bypass flaws that let an unauthenticated adjacent attacker skip normal login checks and obtain admin access, enabling full system compromise including config changes and sensitive data exposure.

Exploitability

Exploitation requires the attacker to be on the same network segment (adjacent) with no user interaction or prior authentication needed.

Blast radius

Successful exploitation grants full administrative control over affected devices, risking complete data exfiltration, configuration tampering, and potential lateral movement within the network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to AOS-10 version 2.590 or later, as this is the fixed version specified in the vulnerability description.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.