Live › vulnerability › CVE-2026-79871
Go to dashboardAOS-10 wireless controllers have a command line interface flaw that exposes sensitive information to remote users. An unauthenticated attacker can retrieve that data and use it to reach other network services that AOS-10 supports.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| AOS-10 | vendor | >= 10.8.0.0, <= 10.8.1.1; >= 10.7.0.0, <= 10.7.2.6; >= 10.4.0.0, <= 10.4.1.13 | 10.8.1.2, 10.7.2.7, 10.4.1.14 |
Run show version on the controller and compare against the affected ranges: 10.8.0.0 to 10.8.1.1, 10.7.0.0 to 10.7.2.6, or 10.4.0.0 to 10.4.1.13.
Upgrade to 10.8.1.2, 10.7.2.7, or 10.4.1.14 (whichever matches your branch).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10.
This page as .md · .json · in your agent: get_signal("CVE-2026-79871")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.