{"id":"CVE-2026-79871","kind":"vulnerability","aliases":["CVE-2026-79871"],"related":[],"title":"Aruba AOS-10: unauthenticated CLI flaw leaks data that enables further network access","description":"A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10.","summary":"AOS-10 wireless controllers have a command line interface flaw that exposes sensitive information to remote users. An unauthenticated attacker can retrieve that data and use it to reach other network services that AOS-10 supports.","severity":"critical","cvss":9.6,"epss":0.00182,"exploited":false,"exploited_at":null,"products":[{"name":"AOS-10","fixed":["10.8.1.2","10.7.2.7","10.4.1.14"],"affected":">= 10.8.0.0, <= 10.8.1.1; >= 10.7.0.0, <= 10.7.2.6; >= 10.4.0.0, <= 10.4.1.13","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["aos-10","aruba","hpe","infrastructure","network-gear"],"not_affected_if":["unknown"],"how_to_check":"Run 'show version' on the controller and compare against the affected ranges: 10.8.0.0 to 10.8.1.1, 10.7.0.0 to 10.7.2.6, or 10.4.0.0 to 10.4.1.13.","fix":"Upgrade to 10.8.1.2, 10.7.2.7, or 10.4.1.14 (whichever matches your branch).","status":"open","published_at":"2026-10-22T19:17:59+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","triaged_at":"2026-10-23T22:31:49+00:00","updated_at":"2026-10-24T07:15:51+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-10-23T22:31:49Z","model":"claude-haiku-5-5","output":{"fix":"Upgrade to 10.8.1.2, 10.7.2.7, or 10.4.1.14 (whichever matches your branch).","reach":"network","title":"Aruba AOS-10: unauthenticated CLI flaw leaks data that enables further network access","impact":"medium","summary":"AOS-10 wireless controllers have a command line interface flaw that exposes sensitive information to remote users. An unauthenticated attacker can retrieve that data and use it to reach other network services that AOS-10 supports.","category":"infrastructure","who_cares":["aos-10","aruba","hpe","network-gear"],"confidence":0.7,"needs_auth":"no","worst_case":"Unauthenticated remote attacker retrieves sensitive data enabling access to network services","analyst_note":"Check the HPE Aruba security bulletin for the exact CLI exposure, whether the CLI must be reachable from the internet, and any non-default settings required.","how_to_check":"Run 'show version' on the controller and compare against the affected ranges: 10.8.0.0 to 10.8.1.1, 10.7.0.0 to 10.7.2.6, or 10.4.0.0 to 10.4.1.13.","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000539,"input_tokens":3033,"output_tokens":472,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Find the vendor advisory and the fixed AOS-10 versions via the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-79871; confirm which CLI service is exposed and the affected version range.","search":"'-10':3A,21A,23B,31B,64B,78C,113C '-2026':15A,18A '-79871':16A,19A 'access':13A,86C,106C 'allow':80C,92C 'ao':2A,22B,30B,63B,77C,112C 'aos':20A 'aruba':1A,24B 'attack':49B,84C,94C 'cli':5A 'command':36B,73C 'control':33B 'could':79C,91C,99C 'cve':14A,17A 'data':8A,53B 'disclosur':69C 'enabl':10A 'exploit':90C 'expos':41B 'flaw':6A,39B 'gain':104C 'gear':29B 'hpe':25B 'inform':43B,68C,88C,97C 'infrastructur':26B 'interfac':38B,75C 'leak':7A 'line':37B,74C 'network':12A,28B,60B,108C 'network-gear':27B 'potenti':103C 'reach':58B 'remot':45B,83C 'retriev':51B,96C 'sensit':42B,67C,87C 'servic':61B,109C 'success':89C 'support':65B,110C 'unauthent':4A,48B,82C 'use':55B,101C 'user':46B 'vulner':70C 'wireless':32B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T19:17:59+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-79871","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79871","severity":null,"published_at":"2026-10-22T19:17:59+00:00","modified_at":"2026-10-23T20:17:24+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-79871:189","url":null,"severity":null,"published_at":"2026-10-23T22:15:47+00:00","modified_at":"2026-10-23T22:15:50+00:00","first_seen_at":"2026-10-23T22:15:47+00:00","fetched_at":"2026-10-23T22:15:50+00:00","note":"Correction: removed the not-affected-if tag I added in the previous write. HPE names no condition that makes a device safe, so I have no basis for one."},{"source":"epss","external_id":"CVE-2026-79871","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-79871","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[{"id":1280,"url":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05162.txt","title":"HPESBNW05162 HPE Networking AOS-8 and AOS-10 advisory","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":1351,"url":"https://www.cve.org/CVERecord?id=CVE-2026-79871","title":"CVE Record: CVE-2026-79871","kind":"other","source":"analyst","text":null,"published_at":null,"relation":"describes","confidence":null,"note":null},{"id":1256,"url":"https://www.bleepingcomputer.com/news/security/hpe-patches-eight-max-severity-rce-and-auth-bypass-aos-flaws/","title":"HPE patches eight max severity RCE and auth bypass AOS flaws","kind":"blog","source":"analyst","text":"Secondary. Quotes HPE advisory: restrict CLI and web management interfaces to dedicated L2 VLAN and/or L3+ firewall; HPE not aware of public discussion or exploit code as of release. Does not list this CVE or fixed versions.","published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}