Live › vulnerability › CVE-2026-79844
Go to dashboardHPE Aruba AOS-10 wireless controllers have authentication bypass flaws in an interface that can be reached remotely. A remote attacker with no credentials can run arbitrary commands on the underlying operating system if certain outside conditions are met.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| AOS-10 | vendor | >= 10.8.0.0, <= 10.8.1.1; >= 10.7.0.0, <= 10.7.2.6; >= 10.4.0.0, <= 10.4.1.13 | 10.8.1.2, 10.7.2.7, 10.4.1.14 |
10.8.1.1, 10.7.x up to 10.7.2.6, 10.4.x up to 10.4.1.13s reading of HPEs CSAF, the 10.6 and 10.3 branches and End-of-Maintenance/End-of-Support releases are also affected or presumed affected10.8.1.2, 10.7.2.7 or 10.4.1.14 or later, depending on branchEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
This page as .md · .json · in your agent: get_signal("CVE-2026-79844")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.