Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-79875

A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an…

Risk score
57/100
CVSS
9.3 v3.1
Exploit chance (30 days)
0.2%
Published
22 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensi…
Affected
See advisory
Fix
Apply the vendor's security update; see the linked advisory.
Exploitation
No known exploitation

Why it is Yellow

  • CVSS 9.3 critical

References

Original description

A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.

Last activity 22 Oct 2026. Patch Forecast updates every hour.