CVE-2026-79890 — Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol
There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation …
Published: 2026-10-22 · CVSS: 8.1 · CVSS 3.1
There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Source: CVE Program · Revision db05a1c62c0469669d7e26796862e22314b38180