{"id":"CVE-2026-79862","kind":"vulnerability","aliases":["CVE-2026-79862"],"related":[],"title":"Aruba AOS-10 and AOS-8 controllers: buffer overflow lets adjacent attacker run code","description":"Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted data to the affected interface. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.","summary":"Aruba AOS-10 and AOS-8 wireless controllers have buffer overflows in an interface that an unauthenticated attacker on the adjacent network can reach. Successful exploitation runs arbitrary code as a privileged user on the underlying operating system.","severity":"critical","cvss":9.6,"epss":0.00195,"exploited":false,"exploited_at":null,"products":[{"name":"AOS-10","fixed":["10.8.1.2","10.7.2.7","10.4.1.14"],"affected":"10.8.x <= 10.8.1.1; 10.7.x <= 10.7.2.6; 10.4.x <= 10.4.1.13","ecosystem":"vendor"},{"name":"AOS-8","fixed":["8.13.3.1","8.10.0.24"],"affected":"8.13.x <= 8.13.3.0; 8.10.x <= 8.10.0.23","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["adjacent-network","aos-10","aos-8","aruba","infrastructure","network-appliance","wireless"],"not_affected_if":["fixed-version-installed","no-adjacent-access"],"how_to_check":"Run the show version command on each controller and compare against the affected ranges: AOS-10 10.8.x up to 10.8.1.1, 10.7.x up to 10.7.2.6, 10.4.x up to 10.4.1.13; AOS-8 8.13.x up to 8.13.3.0, 8.10.x up to 8.10.0.23.","fix":"Upgrade AOS-10 to 10.8.1.2, 10.7.2.7 or 10.4.1.14, and AOS-8 to 8.13.3.1 or 8.10.0.24.","status":"open","published_at":"2026-10-22T19:17:58+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","triaged_at":"2026-10-23T22:31:55+00:00","updated_at":"2026-10-24T07:15:51+00:00","category":"infrastructure","confidence":0.8,"triage":{"at":"2026-10-23T22:31:55Z","model":"claude-haiku-5-5","output":{"fix":"Upgrade AOS-10 to 10.8.1.2, 10.7.2.7 or 10.4.1.14, and AOS-8 to 8.13.3.1 or 8.10.0.24.\nUnknown whether a workaround exists before patching; the sources do not say which interface is affected.","reach":"network","title":"Aruba AOS-10 and AOS-8 controllers: buffer overflow lets adjacent attacker run code","impact":"high","summary":"Aruba AOS-10 and AOS-8 wireless controllers have buffer overflows in an interface that an unauthenticated attacker on the adjacent network can reach. Successful exploitation runs arbitrary code as a privileged user on the underlying operating system.","category":"infrastructure","who_cares":["aruba","aos-10","aos-8","wireless","network-appliance"],"confidence":0.8,"needs_auth":"no","worst_case":"Attacker runs arbitrary code as privileged user on controller OS.","analyst_note":"Identify the affected interface named in the Aruba advisory and confirm whether a configuration workaround exists before upgrade; see https://nvd.nist.gov/vuln/detail/CVE-2026-79862.","how_to_check":"Run the show version command on each controller and compare against the affected ranges: AOS-10 10.8.x up to 10.8.1.1, 10.7.x up to 10.7.2.6, 10.4.x up to 10.4.1.13; AOS-8 8.13.x up to 8.13.3.0, 8.10.x up to 8.10.0.23.","needs_analyst":true,"not_affected_if":["fixed-version-installed","no-adjacent-access"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000621,"input_tokens":3133,"output_tokens":615,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Sources give only NVD text; find the vendor advisory for affected AOS-10/AOS-8 versions, the affected interface, and the patched release.","search":"'-10':3A,22A,29B,40B,85C '-2026':16A,19A '-79862':17A,20A '-8':6A,24A,31B,43B,88C 'adjac':11A,26B,58B,93C 'adjacent-network':25B 'affect':81C,106C 'allow':90C,111C 'ao':2A,5A,28B,30B,39B,42B,84C,87C 'aos':21A,23A 'applianc':36B 'arbitrari':65B,97C,116C 'aruba':1A,32B,38B 'attack':12A,55B,94C,113C 'buffer':8A,47B,76C 'code':14A,66B,98C,117C 'control':7A,45B 'could':89C,110C 'craft':102C 'cve':15A,18A 'data':103C 'execut':96C,115C 'exploit':63B,109C 'infrastructur':33B 'interfac':51B,82C,107C 'let':10A 'network':27B,35B,59B 'network-appli':34B 'oper':74B,125C 'overflow':9A,48B,77C 'privileg':69B,120C 'reach':61B 'run':13A,64B 'send':100C 'special':101C 'success':62B,108C 'system':75B,126C 'unauthent':54B,92C 'under':73B,124C 'user':70B,121C 'vulner':78C 'wireless':37B,44B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T19:17:58+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-79862","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79862","severity":null,"published_at":"2026-10-22T19:17:58+00:00","modified_at":"2026-10-23T20:17:23+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-79862:199","url":null,"severity":null,"published_at":"2026-10-23T22:18:08+00:00","modified_at":"2026-10-23T22:18:08+00:00","first_seen_at":"2026-10-23T22:18:08+00:00","fetched_at":"2026-10-23T22:18:08+00:00","note":"Read HPE bulletin HPESBNW05162 rev.1 (Oct 22 2026): CVSS 9.6 AV:A, fixed releases listed; interface not named for this CVE; HPE says no known exploit/public discussion. Did not find a PoC or social discussion (not searched on X)."},{"source":"epss","external_id":"CVE-2026-79862","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-79862","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[{"id":1280,"url":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05162.txt","title":"HPESBNW05162 HPE Networking AOS-8 and AOS-10 advisory","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}