CVE-2026-79853
9.8 CRITICALPublished 2026-10-22 · Updated 2026-10-26
AI risk analysis
- Summary
- An unauthenticated remote attacker can access a vulnerable interface in AOS-10 to steal sensitive information and potentially execute arbitrary commands on the underlying OS due to insufficient input validation or access controls.
- Exploitability
- Highly exploitable by unauthenticated attackers over the network with no user interaction required.
- Blast radius
- Full system compromise is possible, leading to complete data exfiltration, unauthorized command execution, and potential lateral movement within the network.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to AOS-10 version 2.590 or later, as this is the fixed version that addresses CVE-2026-79853.
sensitive-data-exposurerceunauthenticated-accessweb-api
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to obtain sensitive information from the affected system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-109122PoC
- HIGHCVE-2026-109237PoC
- HIGHCVE-2026-109391PoC
- HIGHCVE-2026-110632
- CRITICALCVE-2026-114108PoC
- CRITICALCVE-2026-79871
- CRITICALCVE-2017-20241
- CRITICALCVE-2017-20242
Related by shared AI tags and CWE weakness class. Browse the full archive.