CVE-2026-79882 — Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10
There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead to unauthenticated remote code execution by an adjacent attacker sending specially craf…
Published: 2026-10-22 · CVSS: 8.3 · CVSS 3.1
There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead to unauthenticated remote code execution by an adjacent attacker sending specially crafted packets. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.
Source: CVE Program · Revision db05a1c62c0469669d7e26796862e22314b38180