Patchfirst
Patchfirst
CVE-2026-79851 Critical · 10.0 EPSS 0.8%

Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote…

Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)

Summary

Buffer overflow vulnerabilities in the affected interface of ArubaOS (AOS) AOS-10 from Hewlett Packard Enterprise (HPE) are caused by improper restriction of operations within the bounds of a memory buffer. An unauthenticated remote attacker over the network, with no user interaction required, could execute arbitrary code as a privileged user on the underlying operating system and achieve complete system compromise.

Official description · NVD

Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete system compromise.

Breakdown
20.0 / 100
Exploited
Not confirmed
Reports
0
Tactics
0/15

Disclosed on 22 Oct 2026. No public exploit code or confirmed exploitation is recorded.

techniques

No techniques linked

No ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.

What security researchers reported

Not named in any threat report yet

Also mentioned in 6 community threat pulses (AlienVault OTX)

Weaker evidence

Pulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.

References

1 link, grouped by NVD tag

Other 1

support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05162en_us&docLocale=en_US
↑ ↓ chooseEnter openEsc close