Live › vulnerability › CVE-2026-79859
Go to dashboardArubaOS AOS-8 wireless controllers have a buffer overflow in an exposed interface. An unauthenticated attacker who reaches it can run arbitrary code as a privileged user on the underlying operating system.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| ArubaOS (AOS-8) | vendor | >= 8.13.0.0, <= 8.13.3.0; >= 8.10.0.0, <= 8.10.0.23 | 8.13.3.1, 8.10.0.24 |
Check the running version on the controller with show version and compare it to the affected ranges: 8.13.0.0 to 8.13.3.0 and 8.10.0.0 to 8.10.0.23.
Upgrade to AOS-8 8.13.3.1 or 8.10.0.24, or later fixed releases.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.
This page as .md · .json · in your agent: get_signal("CVE-2026-79859")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.