CVE-2026-79875

Summary

The PAPI protocol in AOS-8 contains a flaw that allows an unauthenticated adjacent attacker to bypass authentication controls, potentially leading to administrative access and unauthorized data manipulation.

Exploitability

Exploitation requires the attacker to be on the same network segment (adjacent) with no authentication or user interaction needed.

Blast radius

Successful exploitation could grant full administrative control over affected systems, enabling attackers to modify configurations and access sensitive data within the network segment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to AOS-8 version 2.590 or later, as this is the fixed version that addresses CVE-2026-79875.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.