CVE-2026-79847
Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated…
- Risk score
- 76/100
- CVSS
- 10.0 v3.1
- Exploit chance (30 days)
- 0.8%
- Published
- 22 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- AOS-10 has a buffer overflow vulnerability that can be exploited by sending specially crafted packets, allowing unauthenticated remote code execution as a privileged user.
- Affected
- {'product': 'AOS-10', 'interface': 'affected interface'}
- Fix
- Check the linked advisory for details on the fix.
- Exploitation
- No known exploitation
In the news
TL;DR
HPE patches 72 vulnerabilities in ArubaOS, including 8 max-severity RCE and auth bypass issues.
- HPE warns customers to patch ASAP due to complexity, breadth, and impact of vulnerabilities.
- Mitigation measures include restricting access to AOS management interfaces and using firewalls.
- No publicly available proof-of-concept exploit code or evidence of exploitation in the wild.
- Vulnerabilities affect multiple AOS-8 and AOS-10 software versions.
AI summary of 1 article.
Why it is Amber
- CVSS 10.0 critical
- Remotely exploitable without logging in
References
Original description
Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution by sending specially crafted packets to the affected interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Last activity 22 Oct 2026. Patch Forecast updates every hour.