Live › vulnerability › CVE-2026-79881
Go to dashboardAn authentication bypass in the underlying operating system of AOS-8 lets an unauthenticated remote attacker get past existing authentication controls. Successful exploitation can run arbitrary code as a privileged user, giving full control of the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|
| AOS-8 | vendor | >= 8.10.0.0, <= 8.10.0.23; >= 8.12.0.0, <= 8.13.3.0 | 8.10.0.24, 8.13.3.1 |
show version on each Mobility Conductor/Controller/Gateway; affected if on 8.10.0.0-8.10.0.23 or 8.12.0.0-8.13.3.0 (or an older unsupported release)8.13.3.1 (8.12/8.13 branch) or 8.10.0.24 (8.10 branch) or later, per HPESBNW05162 as reported by secondary sources; confirm on the HPE pageEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An authentication bypass vulnerability in the underlying operating system of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system leading to complete system compromise.
This page as .md · .json · in your agent: get_signal("CVE-2026-79881")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.