{"id":"CVE-2026-79887","kind":"vulnerability","aliases":["CVE-2026-79887"],"related":[],"title":"AOS-8 web interface flaw lets unauthenticated attackers run code remotely","description":"A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could lead to complete device control, enabling interception of network traffic and potential compromise of connected systems.","summary":"A flaw in the web interface of AOS-8, Alcatel-Lucent Enterprise's network controller OS, lets an unauthenticated remote attacker execute code on the device. Successful exploitation gives the attacker full device control, including interception of network traffic and access to connected systems.","severity":"high","cvss":8.1,"epss":0.00255,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["aos-8","infrastructure","network-controller","self-hosted"],"not_affected_if":[],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-22T19:18:01+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","triaged_at":"2026-10-25T03:05:49+00:00","updated_at":"2026-10-25T03:05:49+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T03:05:49Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"internet","title":"AOS-8 web interface flaw lets unauthenticated attackers run code remotely","impact":"high","summary":"A flaw in the web interface of AOS-8, Alcatel-Lucent Enterprise's network controller OS, lets an unauthenticated remote attacker execute code on the device. Successful exploitation gives the attacker full device control, including interception of network traffic and access to connected systems.","category":"infrastructure","nicknames":[],"who_cares":["aos-8","network-controller","self-hosted"],"confidence":0.5,"needs_auth":"no","worst_case":"Attacker gains full device control and can intercept network traffic","analyst_note":"Find the vendor advisory and the affected and fixed AOS-8 versions, plus whether the web interface must be exposed; source list has only NVD and EPSS.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organizations running AOS-8 controllers with the web management interface reachable over the network. Sources do not state affected versions or whether the interface must be exposed to untrusted networks, so unknown whether non-exposed deployments are safe.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000559,"input_tokens":3341,"output_tokens":449,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-79887':14A,17A '-8':2A,19B,35B,80C 'access':68B 'achiev':88C 'alcatel':37B 'alcatel-luc':36B 'allow':82C 'ao':1A,18B,34B,79C 'attack':8A,48B,58B,86C 'code':10A,50B,90C 'complet':97C 'compromis':107C 'connect':70B,109C 'control':23B,42B,61B,99C 'could':81C,94C 'cve':12A,15A 'devic':53B,60B,98C 'enabl':100C 'enterpris':39B 'execut':49B,91C 'exploit':55B,93C 'flaw':5A,28B 'full':59B 'give':56B 'host':26B 'includ':62B 'infrastructur':20B 'intercept':63B,101C 'interfac':4A,32B,77C 'lead':95C 'let':6A,44B 'lucent':38B 'network':22B,41B,65B,103C 'network-control':21B 'os':43B 'potenti':106C 'remot':11A,47B,85C,89C 'run':9A 'self':25B 'self-host':24B 'success':54B,92C 'system':71B,110C 'traffic':66B,104C 'unauthent':7A,46B,84C 'vulner':73C 'web':3A,31B,76C","nicknames":[],"mitigations":[],"who_affected":"Organizations running AOS-8 controllers with the web management interface reachable over the network. Sources do not state affected versions or whether the interface must be exposed to untrusted networks, so unknown whether non-exposed deployments are safe.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T19:18:01+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-79887","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79887","severity":null,"published_at":"2026-10-22T19:18:01+00:00","modified_at":"2026-10-23T20:17:26+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null},{"source":"epss","external_id":"CVE-2026-79887","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-79887","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}