Live › vulnerability › CVE-2026-79860
Go to dashboardA buffer overflow in an AOS-8 network service lets an attacker send crafted UDP packets to port 8211 and run code as a privileged user on the controller's operating system, with no login needed. The sources rate it critical (CVSS 9.8) and say it is not known to be exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| AOS-8 | vendor | >= 8.12.0.0, <= 8.13.3.0; >= 8.10.0.0, <= 8.10.0.23 | 8.13.3.1, 8.10.0.24 |
| AOS-8 | vendor | 8.13.x <= 8.13.3.0; 8.10.x <= 8.10.0.23; EoM releases (e.g. 8.12.x) presumed affected | 8.13.3.1, 8.10.0.24 |
show version8.13.3.0 or older in the 8.13 line, or 8.10.0.23 or older in the 8.10 linenmap -sU -p 8211 <device>, and review firewall rules in front of the devices8.13.3.1 or later (8.13 line) or 8.10.0.24 or later (8.10 line); downloads at networkingsupport.hpe.comEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port 8211. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.
This page as .md · .json · in your agent: get_signal("CVE-2026-79860")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.