by Kastro
Paper/Archive/CVE-2026-79868

CVE-2026-79868

Hewlett Packard Enterprise (HPE) ArubaOS (AOS) — Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8

EPSS 0.3%CVSS 9.6
critical.is priorityof 100
33
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 19.2.192 × 203.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data, leading to complete compromise of the affected system.

Affected

ProductAffectedFixed inSource
ArubaOS (AOS)8.13.0.0 – 8.13.3.0–CNA
ArubaOS (AOS)8.10.0.0 – 8.10.0.23–CNA

Scores by source

hpe (CNA)9.6CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

refsupport.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US