Zero Radar
← feed
CriticalVulnerabilityCVE-2026-79853updated 25 Oct 2026, 16:50 UTC

AOS-10 network devices can leak data and allow remote command execution

An attacker on the internet with no login could pull sensitive information from the device and possibly run commands on it. This is a serious flaw that could let someone take over the device.

Official, 2 sources
SeverityCriticalCVSS 9.8 of 10
Being exploited?UnclearNo reports either way yet
Fix available?UnclearNo fixed version published in the sources yet
How sure is this?Official, 2 sourcesBacked by an official source

How the attack works simplified

  1. 1Remote attackerNo login or credentials needed
  2. 2Reaches interfaceAffected interface reachable over the network
  3. 3Sensitive data leakedUnauthenticated information disclosure
  4. 4Commands executedPossible arbitrary OS command execution
  5. ResultAttacker may control the device

What happened

Sensitive information disclosure vulnerabilities in an interface of AOS-10 allow unauthenticated remote attackers to obtain sensitive data, which may lead to arbitrary command execution on the underlying operating system.

Why it is dangerous: A remote attacker without credentials could read sensitive system information and potentially gain control of the device, which can expose the network it protects.

Are you affected?

You are affected if you run AOS-10 with the affected interface exposed to the network; the sources do not list specific versions or configurations.

AOS-10 (specific versions unknown from the provided material)

What to do

  1. Check the vendor advisory for the affected AOS-10 versions and the fixed release, then update as soon as possible
  2. Restrict access to the affected management interface so it is not reachable from the internet
  3. Monitor the device for unusual activity until patched

Timeline

  1. 22 Oct 2026, 19:17 UTC
    Publicly disclosed
  2. 22 Oct 2026, 19:17 UTC
    Reported by NVD · NVD
  3. 25 Oct 2026, 16:50 UTC
    GitHub Advisory reported on it · GitHub Advisory

Sources 2 reports, oldest first

Official vendor, government CERT or advisory database

Technical details

ID
CVE-2026-79853 · GHSA-776w-cmh7-6vhx
CVSS
9.8 / 10
EPSS
0.7% chance of exploitation within 30 days
Disclosed
22 Oct 2026, 19:17 UTC
On Zero Radar
before the radar started
Last change
25 Oct 2026, 16:50 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

AOS-10 network devices can leak data and allow remote command execution · Zero Radar