Live › vulnerability › CVE-2026-79886
Go to dashboardAn unauthenticated buffer overflow in the PAPI protocol of Aruba AOS-8 wireless controllers lets a remote attacker crash or disrupt the affected service. The sources describe limited integrity impact and do not say that code execution is possible.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
AOS-8 wireless controllers that expose the PAPI protocol to the network are the systems to look at. The sources do not list affected versions or say whether PAPI is enabled by default, so unknown whether a given controller is exposed.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| ArubaOS (AOS-8) | vendor | >= 8.12.0.0, <= 8.13.3.0; >= 8.10.0.0, <= 8.10.0.23 | 8.13.3.1, 8.10.0.24 |
show version8.13.3.0, or 8.10.x at or below 8.10.0.238.13.3.1 (8.13 train) or 8.10.0.24 (8.10 train), or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
An unauthenticated buffer overflow vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected service on the controller, with a limited impact to its integrity.
This page as .md · .json · in your agent: get_signal("CVE-2026-79886")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.