Live › vulnerability › CVE-2026-79863
Go to dashboardHPE Aruba AOS-10 and AOS-8 wireless controllers have buffer overflows in an affected interface that accepts unauthenticated input. An attacker on an adjacent network can send crafted data and run arbitrary code as a privileged user on the underlying OS.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| AOS-10 | vendor | >= 10.4.0.0, <= 10.4.1.13; >= 10.7.0.0, <= 10.7.2.6; >= 10.8.0.0, <= 10.8.1.1 | 10.4.1.14, 10.7.2.7, 10.8.1.2 |
| AOS-8 | vendor | >= 8.10.0.0, <= 8.10.0.23; >= 8.13.0.0, <= 8.13.3.0 | 8.10.0.24, 8.13.3.1 |
10.4.1.13, 10.7.2.6, 10.8.1.1; AOS-8 up to 8.10.0.23, 8.13.3.0Upgrade AOS-10 to 10.4.1.14, 10.7.2.7 or 10.8.1.2, and AOS-8 to 8.10.0.24 or 8.13.3.1, depending on the branch in use.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted data to the affected interface. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.
This page as .md · .json · in your agent: get_signal("CVE-2026-79863")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.