← All vulnerabilities
CVE-2026-79851EUVD-2026-108351GHSA-Q9P2-F896-Q4CP

Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Public exploit
None on Exploit-DB

Summary

Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete system compromise.

Affected versions

  • Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

    From 10.8.0.0 · through 10.8.1.1; From 10.7.0.0 · through 10.7.2.6; From 10.4.0.0 · through 10.4.1.13

References 1

support.hpe.com