by Kastro
Paper/Archive/CVE-2026-79847

CVE-2026-79847

Hewlett Packard Enterprise (HPE) ArubaOS (AOS) — Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10

EPSS 0.8%CVSS 10.0
critical.is priorityof 100
41
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 57.1.571 × 2011.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution by sending specially crafted packets to the affected interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

Affected

ProductAffectedFixed inSource
ArubaOS (AOS)10.8.0.0 – 10.8.1.1–CNA
ArubaOS (AOS)10.7.0.0 – 10.7.2.6–CNA
ArubaOS (AOS)10.4.0.0 – 10.4.1.13–CNA

Scores by source

hpe (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US