Live › vulnerability › CVE-2026-79876
Go to dashboardAOS-10 is HPE Aruba's wireless controller and access point operating system. An attacker within radio range, with no login, can exploit a flaw in Wi-Fi frame processing to read sensitive information that may help them reach network services.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| AOS-10 (ArubaOS) | vendor | >= 10.3.0.0, <= 10.4.1.13; >= 10.6.0.0, <= 10.7.2.6; >= 10.8.0.0, <= 10.8.1.1 | 10.4.1.14, 10.7.2.7, 10.8.1.2 |
Check the AOS-10 version running on controllers and gateways against the affected ranges: 10.3.0.0 to 10.4.1.13, 10.6.0.0 to 10.7.2.6, and 10.8.0.0 to 10.8.1.1.
Upgrade to 10.4.1.14, 10.7.2.7, or 10.8.1.2, matching your release branch.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, or to interrupt the normal operation of the affected service.
This page as .md · .json · in your agent: get_signal("CVE-2026-79876")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.