CVE-2026-79872
9.4 CRITICALPublished 2026-10-22 · Updated 2026-10-26
AI risk analysis
- Summary
- A buffer overflow in AOS's underlying OS allows unauthenticated remote attackers to execute arbitrary code with privileged privileges due to insufficient bounds checking.
- Exploitability
- Exploitation is straightforward for a remote attacker since no authentication, user interaction, or special conditions are required.
- Blast radius
- Successful exploitation grants full control of the underlying OS as a privileged user, enabling complete system compromise, data theft, and service disruption.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- No fixed version is published in the description; disable the affected AOS network-facing services until a patch is available.
rcebuffer-overflowunauthenticatedprivileged-execution
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an unauthenticated remote attacker. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-79859
- CRITICALCVE-2026-79862
- CRITICALCVE-2026-49435
- CRITICALCVE-2026-76723
- CRITICALCVE-2026-76744
- CRITICALCVE-2026-79847
- CRITICALCVE-2026-79851
- CRITICALCVE-2026-79860
Related by shared AI tags and CWE weakness class. Browse the full archive.