CVE-2026-79858 — Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8
An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to obtain and modify …
Published: 2026-10-22 · CVSS: 9.8 · CVSS 3.1
An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to obtain and modify sensitive information in the underlying database and to interrupt the normal operation of the affected service.
Source: CVE Program · Revision b3deaa7e6b91db76c3fd9a293f986425b1198aec