CVE-2026-79874

Summary

An authentication bypass in AOS-10's API allows unauthenticated adjacent attackers to bypass existing auth controls and gain administrative access, enabling full system compromise including configuration changes and sensitive data access.

Exploitability

Exploitation requires the attacker to be on the same adjacent network segment with no authentication or user interaction needed.

Blast radius

Successful exploitation grants full administrative control over the device, risking unauthorized configuration changes, data exfiltration, and potential lateral movement within the network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to AOS-10 version 2.590 or later, as this is the fixed version that addresses CVE-2026-79874.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.