Live › vulnerability › CVE-2026-79889
Go to dashboardMultiple web interface endpoints on AOS-8 devices contain a buffer overflow triggered by crafted requests. A remote attacker without credentials can execute arbitrary commands on the underlying operating system and fully compromise the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
AOS-8 network devices with the vulnerable web interface exposed to the attacker's network path; the sources do not list affected versions or whether management interfaces must be reachable from the internet. unknown
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow by using specially crafted requests. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise.
This page as .md · .json · in your agent: get_signal("CVE-2026-79889")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.