1. Home
  2. CVE Database
  3. CVE-2026-79874
CRITICAL · 9.3

CVE-2026-79874

An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain admini...

Vulnerability Description

An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.

CVSS Score

9.3

CRITICAL

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

References

FAQ

What is CVE-2026-79874?

CVE-2026-79874 is a vulnerability with a CVSS score of 9.3 (CRITICAL). An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain admini...

How severe is CVE-2026-79874?

CVE-2026-79874 has been rated CRITICAL with a CVSS base score of 9.3/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2026-79874?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.