Live › vulnerability › CVE-2026-79872
Go to dashboardA buffer overflow in the underlying operating system of HPE Aruba AOS-10 and AOS-8 controllers lets an unauthenticated remote attacker run arbitrary code. The code runs as a privileged user on the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| AOS-10 | vendor | <= 10.8.1.1; <= 10.7.2.6; <= 10.4.1.13 | 10.8.1.2, 10.7.2.7, 10.4.1.14 |
| AOS-8 | vendor | <= 8.13.3.0; <= 8.10.0.23 | 8.13.3.1, 8.10.0.24 |
Unknown from the sources.
Upgrade AOS-10 to 10.8.1.2, 10.7.2.7 or 10.4.1.14; upgrade AOS-8 to 8.13.3.1 or 8.10.0.24, per the affected version ranges listed.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an unauthenticated remote attacker. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
This page as .md · .json · in your agent: get_signal("CVE-2026-79872")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.