Live › vulnerability › CVE-2026-95713
Go to dashboardUnauthenticated buffer overflow in the AOS-8 command line interface (HPE Networking, bulletin HPESBNW05162, one of 72 CVEs). A remote attacker can disrupt the interface and may read or modify limited system data. CVSS 7.0 (AC:H). No known exploitation or public PoC. Fixed in 8.13.3.1 and 8.10.0.24.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| AOS-8 | vendor | >= 8.12.0.0, <= 8.13.3.0; >= 8.10.0.0, <= 8.10.0.23 | 8.13.3.1, 8.10.0.24 |
show version8.13.3.0 or earlier (CVE record says from 8.12.0.0), or 8.10.0.23 or earlier8.13.3.1 or later (8.13 branch) or 8.10.0.24 or later (8.10 branch)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected interface, along with limited access to or modification of some system data.
This page as .md · .json · in your agent: get_signal("CVE-2026-95713")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.