CVE-2026-79866
An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8
- Risk score
- 59/100
- CVSS
- 9.6 v3.1
- Exploit chance (30 days)
- 0.2%
- Published
- 22 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation of this vulnerability could allow an unauthenticated adjacent attacker to read, modify, and delete files on the underlying operating system.
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 9.6 critical
References
Original description
An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation of this vulnerability could allow an unauthenticated adjacent attacker to read, modify, and delete files on the underlying operating system.
Last activity 22 Oct 2026. Patch Forecast updates every hour.