Live › vulnerability › CVE-2026-79851
Go to dashboardA buffer overflow in an AOS-10 network interface lets an unauthenticated remote attacker run arbitrary code as a privileged user on the underlying operating system. The sources report full system compromise of the affected controller or gateway.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| AOS-10 | vendor | >= 10.3.0.0, <= 10.4.1.13; >= 10.6.0.0, <= 10.7.2.6; >= 10.8.0.0, <= 10.8.1.1 | 10.4.1.14, 10.7.2.7, 10.8.1.2 |
Check the installed AOS-10 version (unknown for the exact command; sources do not say) and compare it to the affected ranges: 10.3.0.0 to 10.4.1.13, 10.6.0.0 to 10.7.2.6, 10.8.0.0 to 10.8.1.1.
Upgrade to 10.4.1.14, 10.7.2.7, or 10.8.1.2 (the fixed release for each branch).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete system compromise.
This page as .md · .json · in your agent: get_signal("CVE-2026-79851")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.