by Kastro
Paper/Archive/CVE-2026-79876

CVE-2026-79876

Hewlett Packard Enterprise (HPE) ArubaOS (AOS) — Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing

EPSS 0.2%CVSS 9.3
critical.is priorityof 100
31
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 14.0.140 × 202.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, or to interrupt the normal operation of the affected service.

Affected

ProductAffectedFixed inSource
ArubaOS (AOS)10.8.0.0 – 10.8.1.1–CNA
ArubaOS (AOS)10.7.0.0 – 10.7.2.6–CNA
ArubaOS (AOS)10.4.0.0 – 10.4.1.13–CNA

Scores by source

hpe (CNA)9.3CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H

References

refsupport.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US