Riskcovery

CVE-2026-79872

Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8

State
Published
Severity
9.4 Critical
Published
Oct 22, 2026
Updated
Oct 23, 2026
Reserved
Aug 25, 2026

Read the record on cve.org

Description

A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an unauthenticated remote attacker. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

Scores

CVSSScoreVectorSource
3.19.4 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Lhpe

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
ArubaOS (AOS)Hewlett Packard Enterprise (HPE)
  • 10.8.0.0 through 10.8.1.1Affected
  • 10.7.0.0 through 10.7.2.6Affected
  • 10.4.0.0 through 10.4.1.13Affected
  • 8.13.0.0 through 8.13.3.0Affected
  • 8.10.0.0 through 8.10.0.23Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.