Dashboard / CVE-2026-79889

CVE-2026-79889

HIGH
MEDIUM Priority: 0.05 BB Relevance: 66/100
Published: 2026-10-22 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: High
PR: None
UI: None
S: Unchanged
C: High
I: High
A: High

Description

Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow by using specially crafted requests. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise.

Weakness Classification (1)

References & Advisories (1)

Bug Bounty Relevance

66 / 100
✓ Network accessible
✓ No authentication
✓ No user interaction

CVSS Score

8.1 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.62%
Raw Score 0.006250
Percentile 49.9%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00625
2026-10-28
0.00625

Intelligence Sources

nvd ref →

External Links