CVE-2026-79875

CRITICAL
INFO Priority: 0.02 BB Relevance: 64/100
Published: 2026-10-22 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction Conf. Impact Integ. Impact Scope Change

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: Changed
C: High
I: High
A: None

Description

A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.

Bug Bounty Relevance

64 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

9.3 / 10.0 v3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

EPSS — Exploitation Probability

0.23%
Raw Score 0.002300
Percentile 13.8%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00230
2026-10-28
0.00230

Intelligence Sources

nvd ref →