{"id":"CVE-2026-79895","kind":"vulnerability","aliases":["CVE-2026-79895"],"related":[],"title":"Aruba AOS-10: unauthenticated remote attacker can disrupt an interface","description":"Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected interface.","summary":"An unauthenticated remote attacker can send traffic that disrupts the availability of an affected AOS-10 interface, causing a denial of service. The sources do not name the exact interface or the flawed component.","severity":"high","cvss":7.5,"epss":0.00324,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["aos-10","aruba","infrastructure","network-gear"],"not_affected_if":["unknown"],"how_to_check":"- Check the AOS-10 version on the controller or gateway, for example with `show version` in the CLI; the affected versions are unknown from the sources.\n- Identify whether the management or web interface is reachable from untrusted networks; the sources do not say which interface is affected.","fix":"- Apply the vendor patch for AOS-10 as published in the advisory; the fixed version is unknown from the sources.\n- Restrict access to the affected interface to trusted management networks until patched.","status":"open","published_at":"2026-10-22T19:18:02+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","triaged_at":"2026-10-25T03:15:04+00:00","updated_at":"2026-10-25T03:15:04+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-25T03:15:04Z","model":"claude-haiku-5-5","output":{"fix":"- Apply the vendor patch for AOS-10 as published in the advisory; the fixed version is unknown from the sources.\n- Restrict access to the affected interface to trusted management networks until patched.","reach":"network","title":"Aruba AOS-10: unauthenticated remote attacker can disrupt an interface","impact":"low","summary":"An unauthenticated remote attacker can send traffic that disrupts the availability of an affected AOS-10 interface, causing a denial of service. The sources do not name the exact interface or the flawed component.","category":"infrastructure","nicknames":[],"who_cares":["aos-10","aruba","network-gear"],"confidence":0.6,"needs_auth":"no","worst_case":"Remote attacker takes the affected AOS-10 interface offline","analyst_note":"Find the vendor advisory for CVE-2026-79895 to confirm the affected interface, affected and fixed AOS-10 versions, and whether the CVSS 7.5 rating is accurate for a DoS-only issue.","how_to_check":"- Check the AOS-10 version on the controller or gateway, for example with `show version` in the CLI; the affected versions are unknown from the sources.\n- Identify whether the management or web interface is reachable from untrusted networks; the sources do not say which interface is affected.","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Teams running Aruba AOS-10 gateways or controllers where the affected interface is reachable from networks an attacker can reach. The sources do not name the interface, so whether a given deployment is exposed is unknown. Deployments where the interface is only reachable from trusted internal networks are less exposed.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000639,"input_tokens":3338,"output_tokens":611,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-10':3A,18B,39B,65C '-2026':12A,15A '-79895':13A,16A 'affect':37B,61C,91C 'allow':67C,82C 'ao':2A,17B,38B,64C 'aruba':1A,19B 'attack':6A,27B,71C,78C,84C 'avail':34B,88C 'caus':41B 'compon':57B 'conduct':73C 'could':66C,81C 'cve':11A,14A 'denial':43B,75C 'disrupt':8A,32B,86C 'exact':52B 'exploit':80C 'flaw':56B 'gear':23B 'infrastructur':20B 'interfac':10A,40B,53B,62C,92C 'name':50B 'network':22B 'network-gear':21B 'remot':5A,26B,70C 'send':29B 'servic':45B,77C 'sourc':47B 'success':79C 'traffic':30B 'unauthent':4A,25B,69C 'vulner':58C","nicknames":[],"mitigations":[],"who_affected":"Teams running Aruba AOS-10 gateways or controllers where the affected interface is reachable from networks an attacker can reach. The sources do not name the interface, so whether a given deployment is exposed is unknown. Deployments where the interface is only reachable from trusted internal networks are less exposed.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T19:18:02+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-79895","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79895","severity":null,"published_at":"2026-10-22T19:18:02+00:00","modified_at":"2026-10-23T20:17:27+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null},{"source":"epss","external_id":"CVE-2026-79895","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-79895","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}