CVE-2026-79858

Name of the Vulnerable Software and Affected Versions AOS-8 (affected versions not specified)

Description An unauthenticated SQL injection exists in the PAPI protocol. This allows a remote attacker to obtain or modify sensitive data within the database and disrupt the normal operation of the service. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.