CVE-2026-79871EUVD-2026-108371GHSA-M7C5-P82V-J7H5
Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-10
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10.
Affected versions
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
From 10.8.0.0 · through 10.8.1.1; From 10.7.0.0 · through 10.7.2.6; From 10.4.0.0 · through 10.4.1.13