CVE-2026-95716

MediumCVSS 6.5/10Last modified Oct 23, 2026

Description

An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to change the state of certain settings of a vulnerable system.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-269

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published: Oct 22, 2026
Last modified: Oct 23, 2026
NVD status: Received

Related CVEs from 2026

CVE-2026-957175.5A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that could allow an authenticated remo CVE-2026-957185.3An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote attacker to circumvent existing a CVE-2026-957194.9An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an authenticated attacker with admi CVE-2026-95725.5A security vulnerability has been detected in GPAC up to 2.4.0. Affected by this issue is the function Media_GetSample of the file src/isome CVE-2026-957204.4A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of ser CVE-2026-957213.3A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticate CVE-2026-95737.3A vulnerability was detected in itsourcecode Student Transcript Processing System 1.0. This affects an unknown part of the file /admin/modul CVE-2026-95747.3A flaw has been found in itsourcecode Student Transcript Processing System 1.0. This vulnerability affects unknown code of the file /admin/m CVE-2026-95757.3A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0. This issue affects some unknown processing of the f CVE-2026-957546.9In MISP's UsersController login() method, the pre-authentication database query used for the TOTP (two-factor authentication) verification b CVE-2026-95764.9The Fluent Booking WordPress plugin before 2.1.2 does not verify ownership of the requested group_id before exporting attendee data via the CVE-2026-95774.8The Post Status Notifier Lite WordPress plugin before 1.13.0 does not properly escape the `mod` URL parameter before reflecting it into the