CVE-2026-79885

High · 8.2

CVSS

8.2

EPSS

0.4%

Published

Oct 22, 2026

CISA due date

—

The record

An unauthenticated file write vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to make limited modifications to files on the affected system and to disrupt the availability of the affected service.

Affected packages

Ecosystem	Package	Introduced	Fixed