{"id":"CVE-2026-79853","kind":"vulnerability","aliases":["CVE-2026-79853"],"related":[],"title":"HPE AOS-10 wireless controllers: unauthenticated info leak leads to command execution","description":"Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to obtain sensitive information from the affected system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.","summary":"HPE Networking AOS-10 has an information disclosure flaw in an exposed interface that lets an unauthenticated remote attacker read sensitive data from the device. The sources say successful exploitation could also let an attacker run arbitrary commands on the underlying operating system.","severity":"critical","cvss":9.8,"epss":0.00549,"exploited":false,"exploited_at":null,"products":[{"name":"HPE Networking AOS-10","fixed":["10.8.1.2","10.7.2.7","10.4.1.14"],"affected":">= 10.8.0.0, <= 10.8.1.1; >= 10.7.0.0, <= 10.7.2.6; >= 10.4.0.0, <= 10.4.1.13","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["alcatel-lucent-enterprise","aos-10","aruba","hpe","hpe-aruba","infrastructure","network-gear","wireless"],"not_affected_if":["version-outside-affected-ranges"],"how_to_check":"Check the AOS-10 version on each controller or gateway against the affected ranges: 10.8.0.0 to 10.8.1.1, 10.7.0.0 to 10.7.2.6, and 10.4.0.0 to 10.4.1.13.","fix":"Upgrade to 10.8.1.2, 10.7.2.7, or 10.4.1.14, matching your branch.","status":"open","published_at":"2026-10-22T19:17:57+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","triaged_at":"2026-10-23T22:32:02+00:00","updated_at":"2026-10-25T12:38:51+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T22:32:02Z","model":"claude-haiku-5-5","output":{"fix":"Upgrade to 10.8.1.2, 10.7.2.7, or 10.4.1.14, matching your branch.","reach":"internet","title":"HPE AOS-10 wireless controllers: unauthenticated info leak leads to command execution","impact":"high","summary":"HPE Networking AOS-10 has an information disclosure flaw in an exposed interface that lets an unauthenticated remote attacker read sensitive data from the device. The sources say successful exploitation could also let an attacker run arbitrary commands on the underlying operating system.","category":"infrastructure","who_cares":["aos-10","hpe-aruba","wireless","network-gear"],"confidence":0.6,"needs_auth":"no","worst_case":"Unauthenticated attacker reads secrets and may run commands on the OS","analyst_note":"Sources do not name the affected interface or confirm the command-execution path; check the HPE security bulletin for the exposed interface and whether management-only exposure limits reach.","how_to_check":"Check the AOS-10 version on each controller or gateway against the affected ranges: 10.8.0.0 to 10.8.1.1, 10.7.0.0 to 10.7.2.6, and 10.4.0.0 to 10.4.1.13.","needs_analyst":true,"not_affected_if":["version-outside-affected-ranges"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000555,"input_tokens":3063,"output_tokens":498,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Find the vendor advisory and affected AOS-10 versions and the exposed interface; the NVD entry alone does not give versions or a fix.","search":"'-10':3A,22A,28B,42B,92C '-2026':14A,17A '-79853':15A,18A 'affect':88C,105C 'alcatel':24B 'alcatel-lucent-enterpris':23B 'allow':94C,110C 'also':70B 'ao':2A,27B,41B,91C 'aos':21A 'arbitrari':75B,115C 'aruba':29B,33B 'attack':57B,73B,98C,112C 'command':11A,76B,116C 'control':5A 'could':69B,93C,109C 'cve':13A,16A 'data':60B 'devic':63B 'disclosur':46B,84C 'enterpris':26B 'execut':12A,114C 'exploit':68B,108C 'expos':50B 'flaw':47B 'gear':37B 'hpe':1A,19A,30B,32B,39B 'hpe-aruba':31B 'info':7A 'inform':45B,83C,102C 'infrastructur':34B 'interfac':51B,89C 'lead':9A 'leak':8A 'let':53B,71B 'lucent':25B 'network':36B,40B 'network-gear':35B 'networking':20A 'obtain':100C 'oper':80B,120C 'read':58B 'remot':56B,97C 'run':74B 'say':66B 'sensit':59B,82C,101C 'sourc':65B 'success':67B,107C 'system':81B,106C,121C 'unauthent':6A,55B,96C 'under':79B,119C 'vulner':85C 'wireless':4A,38B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T19:17:57+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-79853","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79853","severity":null,"published_at":"2026-10-22T19:17:57+00:00","modified_at":"2026-10-23T20:17:22+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-79853:207","url":null,"severity":null,"published_at":"2026-10-23T22:21:35+00:00","modified_at":"2026-10-23T22:21:35+00:00","first_seen_at":"2026-10-23T22:21:35+00:00","fetched_at":"2026-10-23T22:21:35+00:00","note":"Vendor is HPE Networking (Aruba), not Alcatel-Lucent Enterprise; advisory HPESBNW05162 (2026-10-22) lists fixed versions. Interface is not named in the advisory (only 'affected interface'). HPE: no known exploit or public PoC. Reporter moonv (bug bounty). Sibling of CVE-2026-79844..79874."},{"source":"epss","external_id":"CVE-2026-79853","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-79853","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-25T12:38:51+00:00","note":null}],"documents":[{"id":1280,"url":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05162.txt","title":"HPESBNW05162 HPE Networking AOS-8 and AOS-10 advisory","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":1280,"url":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05162.txt","title":"HPESBNW05162 HPE Networking AOS-8 and AOS-10 advisory","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"fix","confidence":null,"note":null},{"id":1256,"url":"https://www.bleepingcomputer.com/news/security/hpe-patches-eight-max-severity-rce-and-auth-bypass-aos-flaws/","title":"HPE patches eight max severity RCE and auth bypass AOS flaws","kind":"blog","source":"analyst","text":"Secondary. Quotes HPE advisory: restrict CLI and web management interfaces to dedicated L2 VLAN and/or L3+ firewall; HPE not aware of public discussion or exploit code as of release. Does not list this CVE or fixed versions.","published_at":null,"relation":"describes","confidence":null,"note":null},{"id":1405,"url":"https://www.cve.org/CVERecord?id=CVE-2026-79853","title":"CVE Record: CVE-2026-79853","kind":"other","source":"analyst","text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}