{"id":"CVE-2026-79884","kind":"vulnerability","aliases":["CVE-2026-79884"],"related":[],"title":"Aruba AOS-8 web management interface lets adjacent attacker bypass authentication","description":"A vulnerability in the web-based management interface of AOS-8 could allow an unauthenticated adjacent attacker to bypass existing authentication controls and access sensitive information. Successful exploitation could allow an attacker to gain access to some data in a cleartext format possibly exposing other network infrastructure to further compromise.","summary":"A flaw in the web-based management interface of Aruba AOS-8 lets an unauthenticated attacker on an adjacent network bypass authentication controls. The attacker can read some sensitive data in cleartext, which may expose other network infrastructure to further compromise.","severity":"high","cvss":8.2,"epss":0.00157,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["aos-8","aruba","infrastructure","network-appliance","wireless-controller"],"not_affected_if":["management-interface-not-reachable","no-aos-8"],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-22T19:18:00+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","triaged_at":"2026-10-25T03:03:41+00:00","updated_at":"2026-10-25T03:03:41+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-25T03:03:41Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"network","title":"Aruba AOS-8 web management interface lets adjacent attacker bypass authentication","impact":"medium","summary":"A flaw in the web-based management interface of Aruba AOS-8 lets an unauthenticated attacker on an adjacent network bypass authentication controls. The attacker can read some sensitive data in cleartext, which may expose other network infrastructure to further compromise.","category":"infrastructure","nicknames":[],"who_cares":["aos-8","aruba","network-appliance","wireless-controller"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker reads sensitive data in cleartext and may pivot to other network gear.","analyst_note":"Find the vendor advisory and the list of affected and fixed AOS-8 versions, and confirm whether the management interface flaw is exploitable from adjacent networks in default configs.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["management-interface-not-reachable","no-aos-8"],"who_is_affected":"Organizations running AOS-8 controllers with the web-based management interface reachable from an adjacent network segment. Systems where the management interface is only reachable from tightly restricted administrative networks are less exposed. The sources do not list affected versions.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000579,"input_tokens":3363,"output_tokens":485,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-79884':14A,17A '-8':3A,19B,40B,81C 'access':94C,105C 'adjac':8A,47B,86C 'allow':83C,100C 'ao':2A,18B,39B,80C 'applianc':24B 'aruba':1A,20B,38B 'attack':9A,44B,53B,87C,102C 'authent':11A,50B,91C 'base':34B,76C 'bypass':10A,49B,89C 'cleartext':60B,111C 'compromis':69B,120C 'control':27B,51B,92C 'could':82C,99C 'cve':12A,15A 'data':58B,108C 'exist':90C 'exploit':98C 'expos':63B,114C 'flaw':29B 'format':112C 'gain':104C 'inform':96C 'infrastructur':21B,66B,117C 'interfac':6A,36B,78C 'let':7A,41B 'manag':5A,35B,77C 'may':62B 'network':23B,48B,65B,116C 'network-appli':22B 'possibl':113C 'read':55B 'sensit':57B,95C 'success':97C 'unauthent':43B,85C 'vulner':71C 'web':4A,33B,75C 'web-bas':32B,74C 'wireless':26B 'wireless-control':25B","nicknames":[],"mitigations":[],"who_affected":"Organizations running AOS-8 controllers with the web-based management interface reachable from an adjacent network segment. Systems where the management interface is only reachable from tightly restricted administrative networks are less exposed. The sources do not list affected versions.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T19:18:00+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-79884","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79884","severity":null,"published_at":"2026-10-22T19:18:00+00:00","modified_at":"2026-10-23T20:17:25+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null},{"source":"epss","external_id":"CVE-2026-79884","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-79884","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}