CVE-2026-79861 — Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10
There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation …
Published: 2026-10-22 · CVSS: 9.8 · CVSS 3.1
There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Source: CVE Program · Revision db05a1c62c0469669d7e26796862e22314b38180