---
id: "CVE-2026-79887"
kind: "vulnerability"
aliases: ["CVE-2026-79887"]
title: "AOS-8 web interface flaw lets unauthenticated attackers run code remotely"
severity: "high"
cvss: 8.1
epss: 0.00255
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["aos-8", "infrastructure", "network-controller", "self-hosted"]
not_affected_if: []
published_at: "2026-10-22T19:18:01+00:00"
first_seen_at: "2026-10-23T21:57:32+00:00"
updated_at: "2026-10-25T03:05:49+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-79887", "first_seen_at": "2026-10-23T21:57:32+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-79887", "first_seen_at": "2026-10-24T07:15:51+00:00"}]
---

# AOS-8 web interface flaw lets unauthenticated attackers run code remotely

A flaw in the web interface of AOS-8, Alcatel-Lucent Enterprise's network controller OS, lets an unauthenticated remote attacker execute code on the device. Successful exploitation gives the attacker full device control, including interception of network traffic and access to connected systems.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- unknown

## Timeline

- 2026-10-23T21:57:32+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-79887
- 2026-10-24T07:15:51+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-79887

## From the sources

A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could lead to complete device control, enabling interception of network traffic and potential compromise of connected systems.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_