CVE-2026-79871

Critical · 9.6

CVSS

9.6

EPSS

0.3%

Published

Oct 22, 2026

CISA due date

—

The record

A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10.

Affected packages

Ecosystem	Package	Introduced	Fixed