{"id":"CVE-2026-95710","kind":"vulnerability","aliases":["CVE-2026-95710"],"related":[],"title":"Aruba AOS-10 and AOS-8 OS: unauthenticated overflow allows denial of service","description":"An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected system, with a limited impact to the integrity of the affected component.","summary":"An unauthenticated buffer overflow in the underlying operating system of Aruba AOS-10 and AOS-8 can be triggered by an adjacent attacker. The sources say it leads to denial of service with limited integrity impact.","severity":"high","cvss":7.1,"epss":0.00185,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["aos-10","aos-8","aruba","infrastructure","network-infrastructure"],"not_affected_if":["no-aos-10-or-aos-8-deployed"],"how_to_check":"- Identify AOS-10 or AOS-8 controllers and gateways in use, and their running firmware version (unknown from sources)\n- Check the vendor advisory for the affected version list (unknown from sources)","fix":"- Upgrade AOS-10 or AOS-8 to a fixed release (unknown from sources; check the vendor advisory)","status":"open","published_at":"2026-10-22T19:18:06+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","triaged_at":"2026-10-25T03:31:25+00:00","updated_at":"2026-10-25T03:31:25+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-25T03:31:25Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade AOS-10 or AOS-8 to a fixed release (unknown from sources; check the vendor advisory)","reach":"network","title":"Aruba AOS-10 and AOS-8 OS: unauthenticated overflow allows denial of service","impact":"medium","summary":"An unauthenticated buffer overflow in the underlying operating system of Aruba AOS-10 and AOS-8 can be triggered by an adjacent attacker. The sources say it leads to denial of service with limited integrity impact.","category":"infrastructure","nicknames":[],"who_cares":["aruba","aos-10","aos-8","network-infrastructure"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker crashes the device and disrupts network availability for users","analyst_note":"Confirm affected and fixed versions and the vendor advisory, since the NVD entry gives no version list; check the NVD page at https://nvd.nist.gov/vuln/detail/CVE-2026-95710.","how_to_check":"- Identify AOS-10 or AOS-8 controllers and gateways in use, and their running firmware version (unknown from sources)\n- Check the vendor advisory for the affected version list (unknown from sources)","needs_analyst":true,"not_affected_if":["no-aos-10-or-aos-8-deployed"],"who_is_affected":"Organizations running Aruba AOS-10 or AOS-8 wireless controllers or gateways on a network where an unauthenticated attacker can reach them from an adjacent segment. The sources do not name specific configurations, so exposure beyond that is unknown.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000635,"input_tokens":3380,"output_tokens":595,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-10':3A,21B,41B,78C '-2026':15A,18A '-8':6A,23B,44B,81C '-95710':16A,19A 'adjac':50B,87C 'affect':108C,119C 'allow':10A,84C,99C 'ao':2A,5A,20B,22B,40B,43B,77C,80C 'aruba':1A,24B,39B 'attack':51B,88C,95C,101C 'avail':105C 'buffer':31B,67C 'compon':120C 'conduct':90C 'could':83C,98C 'cve':14A,17A 'denial':11A,58B,92C 'disrupt':103C 'exist':70C 'exploit':97C 'impact':64B,113C 'infrastructur':25B,28B 'integr':63B,116C 'lead':56B 'limit':62B,112C 'network':27B 'network-infrastructur':26B 'oper':36B,74C 'os':7A 'overflow':9A,32B,68C 'say':54B 'servic':13A,60B,94C 'sourc':53B 'success':96C 'system':37B,75C,109C 'trigger':47B 'unauthent':8A,30B,66C,86C 'under':35B,73C 'vulner':69C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Aruba AOS-10 or AOS-8 wireless controllers or gateways on a network where an unauthenticated attacker can reach them from an adjacent segment. The sources do not name specific configurations, so exposure beyond that is unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T19:18:06+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95710","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95710","severity":null,"published_at":"2026-10-22T19:18:06+00:00","modified_at":"2026-10-23T20:17:30+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null},{"source":"epss","external_id":"CVE-2026-95710","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-95710","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}