{"id":"CVE-2026-79865","kind":"vulnerability","aliases":["CVE-2026-79865"],"related":[],"title":"HPE Aruba AOS-10: memory corruption lets adjacent attacker run code as root","description":"A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.","summary":"HPE Aruba AOS-10 has a memory corruption flaw in an interface that an unauthenticated attacker on the adjacent network can reach. Successful exploitation lets the attacker run arbitrary code as a privileged user on the underlying operating system.","severity":"critical","cvss":9.6,"epss":0.00283,"exploited":false,"exploited_at":null,"products":[{"name":"AOS-10","fixed":["10.4.1.14","10.7.2.7","10.8.1.2"],"affected":"<= 10.4.1.13, <= 10.7.2.6 (10.7.x), <= 10.8.1.1 (10.8.x)","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["adjacent-network","aos-10","aruba","hpe","infrastructure","network-gear","rce"],"not_affected_if":["fixed-version-installed"],"how_to_check":"Check the AOS-10 version on each controller and gateway; affected builds are 10.4.1.13 and earlier, 10.7.x up to 10.7.2.6, and 10.8.x up to 10.8.1.1.","fix":"Upgrade to 10.4.1.14, 10.7.2.7, 10.8.1.2 or later.","status":"open","published_at":"2026-10-22T19:17:58+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","triaged_at":"2026-10-23T22:31:53+00:00","updated_at":"2026-10-25T12:38:51+00:00","category":"infrastructure","confidence":0.8,"triage":{"at":"2026-10-23T22:31:53Z","model":"claude-haiku-5-5","output":{"fix":"Upgrade to 10.4.1.14, 10.7.2.7, 10.8.1.2 or later.\nunknown","reach":"network","title":"HPE Aruba AOS-10: memory corruption lets adjacent attacker run code as root","impact":"high","summary":"HPE Aruba AOS-10 has a memory corruption flaw in an interface that an unauthenticated attacker on the adjacent network can reach. Successful exploitation lets the attacker run arbitrary code as a privileged user on the underlying operating system.","category":"infrastructure","who_cares":["aos-10","aruba","hpe","network-gear"],"confidence":0.8,"needs_auth":"no","worst_case":"Unauthenticated adjacent attacker runs code as privileged OS user.","analyst_note":"Confirm which interface is affected and whether a configuration disables it; check the HPE advisory for mitigations, since the sources give none.","how_to_check":"Check the AOS-10 version on each controller and gateway; affected builds are 10.4.1.13 and earlier, 10.7.x up to 10.7.2.6, and 10.8.x up to 10.8.1.1.\nunknown","needs_analyst":true,"not_affected_if":["fixed-version-installed"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000538,"input_tokens":3024,"output_tokens":471,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Check the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-79865 and Aruba/HPE advisories for affected AOS-10 versions, the vulnerable interface, and the patched release.","search":"'-10':4A,21A,26B,37B,83C '-2026':15A,18A '-79865':16A,19A 'achiev':91C 'adjac':8A,23B,52B,88C 'adjacent-network':22B 'affect':79C 'allow':85C,98C 'ao':3A,25B,36B,82C 'aos':20A 'arbitrari':62B,103C 'aruba':2A,27B,35B 'attack':9A,49B,60B,89C,100C 'code':11A,63B,93C,104C 'corrupt':6A,41B,75C 'could':84C,97C 'cve':14A,17A 'execut':94C,102C 'exploit':57B,96C 'flaw':42B 'gear':32B 'hpe':1A,28B,34B 'infrastructur':29B 'interfac':45B,80C 'let':7A,58B 'memori':5A,40B,74C 'network':24B,31B,53B 'network-gear':30B 'oper':71B,112C 'privileg':66B,107C 'rce':33B 'reach':55B 'remot':92C 'root':13A 'run':10A,61B 'success':56B,95C 'system':72B,113C 'unauthent':48B,87C 'under':70B,111C 'user':67B,108C 'vulner':76C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T19:17:58+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-79865","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79865","severity":null,"published_at":"2026-10-22T19:17:58+00:00","modified_at":"2026-10-23T20:17:24+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-79865:196","url":null,"severity":null,"published_at":"2026-10-23T22:16:40+00:00","modified_at":"2026-10-23T22:16:40+00:00","first_seen_at":"2026-10-23T22:16:40+00:00","fetched_at":"2026-10-23T22:16:40+00:00","note":"HPE advisory HPESBNW05162 (22 Oct 2026) covers this CVE, but the page text did not load. Versions come from VulDB and cybersecuritynews, so check them against the HPE bulletin. No exploitation or PoC found (VulDB: none; EPSS <1%, not in KEV). X and community posts not searched."},{"source":"epss","external_id":"CVE-2026-79865","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-79865","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-25T12:38:51+00:00","note":null}],"documents":[{"id":1255,"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US","title":"HPESBNW05162 rev.1 - Multiple Vulnerabilities in HPE Networking Wireless OS (AOS-10 & AOS-8)","kind":"advisory","source":"analyst","text":"Vendor bulletin 2026-10-22. Page is JS-only; body not readable by tools.","published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":1356,"url":"https://cybersecuritynews.com/hpe-warns-aruba-networking-flaws/","title":"HPE Warns Critical Aruba Networking Flaws","kind":"blog","source":"analyst","text":"Fixed: AOS-8.13.3.1, AOS-8.10.0.24 (AOS-10: 10.8.1.2, 10.7.2.7, 10.4.1.14). Affected AOS-8 8.13.3.0 and 8.10.0.23 and earlier. Mitigation: restrict CLI/web management to dedicated L2 segment/VLAN with firewall. PAPI uses UDP 8211. HPE knows of no public PoC or exploitation.","published_at":null,"relation":"fix","confidence":null,"note":null},{"id":1362,"url":"https://vuldb.com/vuln/425452","title":"VulDB VDB-425452 CVE-2026-79865","kind":"other","source":"analyst","text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}