Live › vulnerability › CVE-2026-79865
Go to dashboardHPE Aruba AOS-10 has a memory corruption flaw in an interface that an unauthenticated attacker on the adjacent network can reach. Successful exploitation lets the attacker run arbitrary code as a privileged user on the underlying operating system.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| AOS-10 | vendor | <= 10.4.1.13, <= 10.7.2.6 (10.7.x), <= 10.8.1.1 (10.8.x) | 10.4.1.14, 10.7.2.7, 10.8.1.2 |
Check the AOS-10 version on each controller and gateway; affected builds are 10.4.1.13 and earlier, 10.7.x up to 10.7.2.6, and 10.8.x up to 10.8.1.1.
Upgrade to 10.4.1.14, 10.7.2.7, 10.8.1.2 or later.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.
This page as .md · .json · in your agent: get_signal("CVE-2026-79865")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.