---
id: "CVE-2026-79876"
kind: "vulnerability"
aliases: ["CVE-2026-79876"]
title: "Aruba AOS-10: Wi-Fi frame flaw leaks data to nearby unauthenticated attackers"
severity: "critical"
cvss: 9.3
epss: 0.00174
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "AOS-10 (ArubaOS)", "fixed": ["10.4.1.14", "10.7.2.7", "10.8.1.2"], "affected": ">= 10.3.0.0, <= 10.4.1.13; >= 10.6.0.0, <= 10.7.2.6; >= 10.8.0.0, <= 10.8.1.1", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["aos-10", "aruba", "hpe", "infrastructure", "network-gear", "wi-fi"]
not_affected_if: ["version-outside-affected-ranges"]
published_at: "2026-10-22T19:18:00+00:00"
first_seen_at: "2026-10-23T21:57:32+00:00"
updated_at: "2026-10-25T12:38:51+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-79876", "first_seen_at": "2026-10-23T21:57:32+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-10-23T22:14:43+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-79876", "first_seen_at": "2026-10-24T07:15:51+00:00"}]
---

# Aruba AOS-10: Wi-Fi frame flaw leaks data to nearby unauthenticated attackers

AOS-10 is HPE Aruba's wireless controller and access point operating system. An attacker within radio range, with no login, can exploit a flaw in Wi-Fi frame processing to read sensitive information that may help them reach network services.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:AOS-10 (ArubaOS) affected >= 10.3.0.0, <= 10.4.1.13; >= 10.6.0.0, <= 10.7.2.6; >= 10.8.0.0, <= 10.8.1.1 fixed 10.4.1.14, 10.7.2.7, 10.8.1.2

## How to check

Check the AOS-10 version running on controllers and gateways against the affected ranges: 10.3.0.0 to 10.4.1.13, 10.6.0.0 to 10.7.2.6, and 10.8.0.0 to 10.8.1.1.

## Fix

Upgrade to 10.4.1.14, 10.7.2.7, or 10.8.1.2, matching your release branch.

## Timeline

- 2026-10-23T21:57:32+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-79876
- 2026-10-23T22:14:43+00:00 analyst — Vendor bulletin HPESBNW05162 (22 Oct 2026) is JS-only, so I could not read it. Affected ranges come from the HPE CVE record (cve.org/NVD). Fixed versions come from TrustList, citing the Canadian Cyber Centre, and are unverified against HPE's text. No exploitation or PoC found; BleepingComputer says HPE reports no public exploit. No social search done.
- 2026-10-24T07:15:51+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-79876

## Documents

- [advisory] HPESBNW05162 rev.1 - Multiple Vulnerabilities in HPE Networking Wireless OS (AOS-10 & AOS-8) https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US
- [describes] CVE Record: CVE-2026-79876 https://www.cve.org/CVERecord?id=CVE-2026-79876
- [fix] TrustList: HPE fixes maximum-severity flaws in Aruba AOS-10 and AOS-8 https://trustlist.uk/security-advisories/hpe-aruba-aos-10-and-aos-8-wireless-flaws-cvss-10-unauthenticated-rce-fixed-10-8-1-2-and-8-13-3-1
- [mentions] HPE patches eight max severity RCE and auth bypass AOS flaws https://www.bleepingcomputer.com/news/security/hpe-patches-eight-max-severity-rce-and-auth-bypass-aos-flaws/

## From the sources

A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, or to interrupt the normal operation of the affected service.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_