{"id":"CVE-2026-95712","kind":"vulnerability","aliases":["CVE-2026-95712"],"related":[],"title":"Aruba AOS-8: PAPI protocol flaw leaks information to unauthenticated adjacent attackers","description":"A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information handled by the affected service. Successful exploitation could allow an attacker to view some information and to disrupt the availability of the affected service.","summary":"A sensitive information disclosure flaw in the PAPI protocol of Aruba AOS-8 lets an unauthenticated attacker on an adjacent network read limited information the service handles. The same flaw can also disrupt the availability of the affected service.","severity":"high","cvss":7.1,"epss":0.00192,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["aos-8","aruba","infrastructure","network-appliance"],"not_affected_if":[],"how_to_check":"- Check the AOS-8 controller version against the advisory's affected list (unknown from these sources)\n- Confirm whether PAPI is reachable from networks the attacker could reach (unknown from these sources)","fix":"- Upgrade AOS-8 to the fixed release named in the vendor advisory (unknown from these sources)","status":"open","published_at":"2026-10-22T19:18:07+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","triaged_at":"2026-10-25T03:31:23+00:00","updated_at":"2026-10-25T03:31:23+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T03:31:23Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade AOS-8 to the fixed release named in the vendor advisory (unknown from these sources)","reach":"network","title":"Aruba AOS-8: PAPI protocol flaw leaks information to unauthenticated adjacent attackers","impact":"medium","summary":"A sensitive information disclosure flaw in the PAPI protocol of Aruba AOS-8 lets an unauthenticated attacker on an adjacent network read limited information the service handles. The same flaw can also disrupt the availability of the affected service.","category":"infrastructure","nicknames":[],"who_cares":["aos-8","aruba","network-appliance"],"confidence":0.5,"needs_auth":"no","worst_case":"Limited information disclosed and service availability disrupted by an adjacent attacker","analyst_note":"Find the vendor advisory for CVE-2026-95712 to get affected AOS-8 versions, fixed releases and whether PAPI is enabled by default.","how_to_check":"- Check the AOS-8 controller version against the advisory's affected list (unknown from these sources)\n- Confirm whether PAPI is reachable from networks the attacker could reach (unknown from these sources)","needs_analyst":true,"not_affected_if":[],"who_is_affected":"AOS-8 deployments that expose the PAPI protocol to an adjacent network are affected, per the description. The sources do not list affected versions or configuration details, so unknown whether default configurations are exposed.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000607,"input_tokens":3355,"output_tokens":542,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-8':3A,20B,38B,76C '-95712':15A,18A 'access':84C 'adjac':11A,45B,81C 'affect':63B,90C,109C 'allow':78C,95C 'also':57B 'ao':2A,19B,37B,75C 'applianc':25B 'aruba':1A,21B,36B 'attack':12A,42B,82C,97C 'avail':60B,106C 'could':77C,94C 'cve':13A,16A 'disclosur':29B,68C 'disrupt':58B,104C 'exploit':93C 'flaw':6A,30B,55B 'handl':52B,87C 'inform':8A,28B,49B,67C,86C,101C 'infrastructur':22B 'leak':7A 'let':39B 'limit':48B,85C 'network':24B,46B 'network-appli':23B 'papi':4A,33B,72C 'protocol':5A,34B,73C 'read':47B 'sensit':27B,66C 'servic':51B,64B,91C,110C 'success':92C 'unauthent':10A,41B,80C 'view':99C 'vulner':69C","nicknames":[],"mitigations":[],"who_affected":"AOS-8 deployments that expose the PAPI protocol to an adjacent network are affected, per the description. The sources do not list affected versions or configuration details, so unknown whether default configurations are exposed.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T19:18:07+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95712","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95712","severity":null,"published_at":"2026-10-22T19:18:07+00:00","modified_at":"2026-10-23T20:17:30+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null},{"source":"epss","external_id":"CVE-2026-95712","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-95712","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}