Live › vulnerability › CVE-2026-79873
Go to dashboardHPE Aruba AOS-10 network devices have authentication bypass flaws in the PAPI protocol. An unauthenticated attacker on an adjacent network can gain administrative access, change device configuration, and read or alter sensitive data.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| AOS-10 | vendor | >= 10.8.0.0, <= 10.8.1.1; >= 10.7.0.0, <= 10.7.2.6; >= 10.4.0.0, <= 10.4.1.13 | 10.8.1.2, 10.7.2.7, 10.4.1.14 |
show version on each AOS-10 Conductor, Controller, Gateway and AP (or look in Central)10.8.0.0-10.8.1.1, 10.7.x up to 10.7.2.6, 10.4.x up to 10.4.1.13 (bulletin also lists the 10.6 and 10.3 branches)10.8.1.2, 10.7.2.7 or 10.4.1.14 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data on affected devices.
This page as .md · .json · in your agent: get_signal("CVE-2026-79873")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.