CVE-2026-79876
9.3 CRITICALPublished 2026-10-22 · Updated 2026-10-26
AI risk analysis
- Summary
- AOS-10's Wi-Fi frame processing leaks sensitive information to unauthenticated adjacent attackers due to improper handling of frames, enabling potential further compromise or service disruption.
- Exploitability
- Exploitation requires an unauthenticated attacker to be within wireless range (adjacent), with no user interaction or prior access needed.
- Blast radius
- Successful exploitation could allow an attacker to obtain credentials or other secrets used by AOS-10, enabling lateral movement, persistent access, or denial of service.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to AOS-10 version 2.590 or later, as this is the fixed version specified in the vendor advisory.
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, or to interrupt the normal operation of the affected service.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-79864
- CRITICALCVE-2026-79873
- HIGHCVE-2026-108480
- HIGHCVE-2026-109237PoC
- HIGHCVE-2026-110618PoC
- MEDIUMCVE-2026-76974
- CRITICALCVE-2026-79844
- CRITICALCVE-2026-79853
Related by shared AI tags and CWE weakness class. Browse the full archive.