CVE-2026-79867

CRITICAL
INFO Priority: 0.03 BB Relevance: 64/100
Published: 2026-10-22 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction Conf. Impact Integ. Impact Scope Change

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: Changed
C: High
I: High
A: High

Description

Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.

Bug Bounty Relevance

64 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

9.6 / 10.0 v3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS — Exploitation Probability

0.29%
Raw Score 0.002940
Percentile 22.0%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00294
2026-10-28
0.00294

Intelligence Sources

nvd ref →