by Kastro
Paper/Archive/CVE-2026-79870

CVE-2026-79870

Hewlett Packard Enterprise (HPE) ArubaOS (AOS) — Authentication Bypass leads to Unauthorized Access in AOS-8

EPSS 0.3%CVSS 9.6
critical.is priorityof 100
33
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 19.2.192 × 203.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, access or manipulate sensitive data, and disrupt network operations.

Affected

ProductAffectedFixed inSource
ArubaOS (AOS)8.13.0.0 – 8.13.3.0–CNA
ArubaOS (AOS)8.10.0.0 – 8.10.0.23–CNA

Scores by source

hpe (CNA)9.6CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

refsupport.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US