CVE-2026-79886

High · 8.2

CVSS

8.2

EPSS

0.4%

Published

Oct 22, 2026

CISA due date

—

The record

An unauthenticated buffer overflow vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected service on the controller, with a limited impact to its integrity.

Affected packages

Ecosystem	Package	Introduced	Fixed