← Back to search

CVE-2026-79876

9.3 CRITICAL

Published 2026-10-22 · Updated 2026-10-26

AI risk analysis

Summary
AOS-10's Wi-Fi frame processing leaks sensitive information to unauthenticated adjacent attackers due to improper handling of frames, enabling potential further compromise or service disruption.
Exploitability
Exploitation requires an unauthenticated attacker to be within wireless range (adjacent), with no user interaction or prior access needed.
Blast radius
Successful exploitation could allow an attacker to obtain credentials or other secrets used by AOS-10, enabling lateral movement, persistent access, or denial of service.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to AOS-10 version 2.590 or later, as this is the fixed version specified in the vendor advisory.
sensitive-data-exposureadjacent-attackwi-fiaos-10

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, or to interrupt the normal operation of the affected service.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.