CVE-2026-79856
A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an…
- Risk score
- 72/100
- CVSS
- 9.8 v3.1
- Exploit chance (30 days)
- 0.5%
- Published
- 22 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A buffer overflow vulnerability in the PAPI protocol of AOS-8 allows an unauthenticated remote attacker to circumvent authentication controls, potentially gaining administrative access and manipulating sensitive data.
- Affected
- {'products': ['AOS-8'], 'packages': [], 'versions': []}
- Fix
- Check the linked advisory for a fix, as none is specified.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 9.8 critical
- Remotely exploitable without logging in
References
Original description
A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.
Last activity 22 Oct 2026. Patch Forecast updates every hour.