Live › vulnerability › CVE-2026-79880
Go to dashboardCVE-2026-79880 is in HPE bulletin HPESBNW05162. It is an authenticated, high-privilege SSRF in the AOS-8 CLI that can lead to command execution on the underlying OS. It is one of 72 CVEs fixed in AOS-8 and AOS-10. HPE knows of no public exploit code or in-the-wild exploitation.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| HPE Aruba Networking AOS-8 | vendor | <= 8.13.3.0 (8.13 branch), <= 8.10.0.23 (8.10 branch) | 8.13.3.1, 8.10.0.24 |
show version on each Mobility Conductor, controller or Instant AP8.13.3.0 or earlier in the 8.13 branch, or 8.10.0.23 or earlier in the 8.10 branch8.13.3.1 or 8.10.0.24, or any later release that contains the fixEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability in the command line interface of AOS-8 could allow an authenticated remote attacker with high privileges to conduct a server-side request forgery (SSRF) attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
This page as .md · .json · in your agent: get_signal("CVE-2026-79880")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.