Live › vulnerability › CVE-2026-79879
Go to dashboardMemory corruption in an unnamed interface of AOS-10 lets an unauthenticated attacker on the same layer 2 segment (adjacent) run code as a privileged user on the controller, gateway or AP OS. CVSS 8.8 (AV:A). Disclosed in HPE bulletin HPESBNW05162. HPE is not aware of public exploit code or discussion.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|
| AOS-10 | vendor | 10.8.0.0-10.8.1.1, 10.7.x <= 10.7.2.6, 10.4.x <= 10.4.1.13 | 10.8.1.2, 10.7.2.7, 10.4.1.14 |
show version on each AOS-10 controller, gateway or AP, or check Central10.8.1.1, 10.7.x up to 10.7.2.6 or 10.4.x up to 10.4.1.1310.8.1.2, 10.7.2.7 or 10.4.1.14 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Memory corruption vulnerabilities in the affected interface of AOS-10 could lead to remote code execution by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.
This page as .md · .json · in your agent: get_signal("CVE-2026-79879")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.