{"id":"CVE-2026-79876","kind":"vulnerability","aliases":["CVE-2026-79876"],"related":[],"title":"Aruba AOS-10: Wi-Fi frame flaw leaks data to nearby unauthenticated attackers","description":"A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, or to interrupt the normal operation of the affected service.","summary":"AOS-10 is HPE Aruba's wireless controller and access point operating system. An attacker within radio range, with no login, can exploit a flaw in Wi-Fi frame processing to read sensitive information that may help them reach network services.","severity":"critical","cvss":9.3,"epss":0.00174,"exploited":false,"exploited_at":null,"products":[{"name":"AOS-10 (ArubaOS)","fixed":["10.4.1.14","10.7.2.7","10.8.1.2"],"affected":">= 10.3.0.0, <= 10.4.1.13; >= 10.6.0.0, <= 10.7.2.6; >= 10.8.0.0, <= 10.8.1.1","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["aos-10","aruba","hpe","infrastructure","network-gear","wi-fi"],"not_affected_if":["version-outside-affected-ranges"],"how_to_check":"Check the AOS-10 version running on controllers and gateways against the affected ranges: 10.3.0.0 to 10.4.1.13, 10.6.0.0 to 10.7.2.6, and 10.8.0.0 to 10.8.1.1.","fix":"Upgrade to 10.4.1.14, 10.7.2.7, or 10.8.1.2, matching your release branch.","status":"open","published_at":"2026-10-22T19:18:00+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","triaged_at":"2026-10-23T22:31:46+00:00","updated_at":"2026-10-25T12:38:51+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-10-23T22:31:46Z","model":"claude-haiku-5-5","output":{"fix":"Upgrade to 10.4.1.14, 10.7.2.7, or 10.8.1.2, matching your release branch.","reach":"network","title":"Aruba AOS-10: Wi-Fi frame flaw leaks data to nearby unauthenticated attackers","impact":"medium","summary":"AOS-10 is HPE Aruba's wireless controller and access point operating system. An attacker within radio range, with no login, can exploit a flaw in Wi-Fi frame processing to read sensitive information that may help them reach network services.","category":"infrastructure","who_cares":["aos-10","aruba","wi-fi","network-gear"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker reads sensitive data over Wi-Fi and may reach network services","analyst_note":"Confirm the exact information disclosed and how to check exposure (e.g. vendor advisory linked from NVD); the sources do not say which configuration is needed.","how_to_check":"Check the AOS-10 version running on controllers and gateways against the affected ranges: 10.3.0.0 to 10.4.1.13, 10.6.0.0 to 10.7.2.6, and 10.8.0.0 to 10.8.1.1.\nunknown","needs_analyst":true,"not_affected_if":["version-outside-affected-ranges"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000557,"input_tokens":3080,"output_tokens":498,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Find the vendor advisory and affected AOS-10 versions from the NVD entry references; the sources given do not list fixed versions or a check method.","search":"'-10':3A,22A,25B,36B,91C,126C '-2026':16A,19A '-79876':17A,20A 'access':44B,99C,119C 'adjac':96C 'affect':135C 'allow':93C,105C 'ao':2A,24B,35B,90C,125C 'aos':21A 'aruba':1A,26B,39B 'arubaos':23A 'attack':14A,49B,97C,107C 'control':42B 'could':92C,104C,112C 'cve':15A,18A 'data':10A 'disclosur':80C 'exploit':57B,103C 'fi':6A,34B,63B,86C 'flaw':8A,59B 'frame':7A,64B,87C 'gain':117C 'gear':31B 'help':72B 'hpe':27B,38B 'inform':69B,79C,101C,110C 'infrastructur':28B 'interrupt':129C 'leak':9A 'login':55B 'may':71B 'nearbi':12A 'network':30B,75B,121C 'network-gear':29B 'normal':131C 'oper':46B,132C 'point':45B 'potenti':116C 'process':65B,88C 'radio':51B 'rang':52B 'reach':74B 'read':67B 'retriev':109C 'sensit':68B,78C,100C 'servic':76B,122C,136C 'success':102C 'support':123C 'system':47B 'unauthent':13A,95C 'use':114C 'vulner':81C 'wi':5A,33B,62B,85C 'wi-fi':4A,32B,61B,84C 'wireless':41B 'within':50B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T19:18:00+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-79876","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79876","severity":null,"published_at":"2026-10-22T19:18:00+00:00","modified_at":"2026-10-23T20:17:25+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-79876:185","url":null,"severity":null,"published_at":"2026-10-23T22:14:43+00:00","modified_at":"2026-10-23T22:14:43+00:00","first_seen_at":"2026-10-23T22:14:43+00:00","fetched_at":"2026-10-23T22:14:43+00:00","note":"Vendor bulletin HPESBNW05162 (22 Oct 2026) is JS-only, so I could not read it. Affected ranges come from the HPE CVE record (cve.org/NVD). Fixed versions come from TrustList, citing the Canadian Cyber Centre, and are unverified against HPE's text. No exploitation or PoC found; BleepingComputer says HPE reports no public exploit. No social search done."},{"source":"epss","external_id":"CVE-2026-79876","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-79876","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-25T12:38:51+00:00","note":null}],"documents":[{"id":1255,"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US","title":"HPESBNW05162 rev.1 - Multiple Vulnerabilities in HPE Networking Wireless OS (AOS-10 & AOS-8)","kind":"advisory","source":"analyst","text":"Vendor bulletin 2026-10-22. Page is JS-only; body not readable by tools.","published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":1344,"url":"https://www.cve.org/CVERecord?id=CVE-2026-79876","title":"CVE Record: CVE-2026-79876","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"describes","confidence":null,"note":null},{"id":1257,"url":"https://trustlist.uk/security-advisories/hpe-aruba-aos-10-and-aos-8-wireless-flaws-cvss-10-unauthenticated-rce-fixed-10-8-1-2-and-8-13-3-1","title":"TrustList: HPE fixes maximum-severity flaws in Aruba AOS-10 and AOS-8","kind":"blog","source":"analyst","text":null,"published_at":null,"relation":"fix","confidence":null,"note":null},{"id":1256,"url":"https://www.bleepingcomputer.com/news/security/hpe-patches-eight-max-severity-rce-and-auth-bypass-aos-flaws/","title":"HPE patches eight max severity RCE and auth bypass AOS flaws","kind":"blog","source":"analyst","text":"Secondary. Quotes HPE advisory: restrict CLI and web management interfaces to dedicated L2 VLAN and/or L3+ firewall; HPE not aware of public discussion or exploit code as of release. Does not list this CVE or fixed versions.","published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}