Dashboard / CVE-2026-79878

CVE-2026-79878

HIGH
MEDIUM Priority: 0.07 BB Relevance: 63/100
Published: 2026-10-22 Modified: 2026-10-30 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: High
A: High

Description

A command injection vulnerability in the AOS-8 command line interface accessed by the PAPI protocol could lead to unauthenticated remote code execution by an adjacent attacker sending specially crafted PAPI packets destined to the PAPI UDP port 8211. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
Hewlett Packard Enterprise (HPE) ArubaOS (AOS) 8.13.0.0
Hewlett Packard Enterprise (HPE) ArubaOS (AOS) 8.10.0.0

References & Advisories (1)

Bug Bounty Relevance

63 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

8.8 / 10.0 v3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.82%
Raw Score 0.008220
Percentile 57.3%
Date 2026-10-30

EPSS Trend

2026-10-30
0.00822
2026-10-29
0.00822
2026-10-28
0.00822

Intelligence Sources

mitre ref →
nvd ref →

External Links