Live › vulnerability › CVE-2026-95712
Go to dashboardA sensitive information disclosure flaw in the PAPI protocol of Aruba AOS-8 lets an unauthenticated attacker on an adjacent network read limited information the service handles. The same flaw can also disrupt the availability of the affected service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
AOS-8 deployments that expose the PAPI protocol to an adjacent network are affected, per the description. The sources do not list affected versions or configuration details, so unknown whether default configurations are exposed.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information handled by the affected service. Successful exploitation could allow an attacker to view some information and to disrupt the availability of the affected service.
This page as .md · .json · in your agent: get_signal("CVE-2026-95712")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.