A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.
CVE-2026-79875
CVSS base score
9.3 (v3.1)
Severity
CRITICAL
Attack vector
Adjacent_network
Weakness
CWE-287
Last modified
October 30, 2026
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N