CVE-2026-79876

CRITICAL
INFO Priority: 0.02 BB Relevance: 64/100
Published: 2026-10-22 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction Conf. Impact Scope Change

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: Changed
C: High
I: None
A: High

Description

A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, or to interrupt the normal operation of the affected service.

Bug Bounty Relevance

64 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

9.3 / 10.0 v3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H

EPSS — Exploitation Probability

0.23%
Raw Score 0.002310
Percentile 14.0%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00231
2026-10-28
0.00231

Intelligence Sources

nvd ref →