by Kastro
Paper/Archive/CVE-2026-79844

CVE-2026-79844

Hewlett Packard Enterprise (HPE) ArubaOS (AOS) — Authentication Bypass Leading to Remote Code Execution in AOS-10

EPSS 0.7%CVSS 10.0
critical.is priorityof 100
41
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 52.7.527 × 2010.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Affected

ProductAffectedFixed inSource
ArubaOS (AOS)10.8.0.0 – 10.8.1.1–CNA
ArubaOS (AOS)10.7.0.0 – 10.7.2.6–CNA
ArubaOS (AOS)10.4.0.0 – 10.4.1.13–CNA

Scores by source

hpe (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US