Dashboard / CVE-2026-79882

CVE-2026-79882

HIGH
MEDIUM Priority: 0.06 BB Relevance: 52/100
Published: 2026-10-22 Modified: 2026-10-30 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent No Auth No Interaction Conf. Impact Integ. Impact Scope Change

CVSS Vector Breakdown

AV: Adjacent
AC: High
PR: None
UI: None
S: Changed
C: High
I: High
A: High

Description

There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead to unauthenticated remote code execution by an adjacent attacker sending specially crafted packets. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

Weakness Classification (1)

Affected Software (3)

VendorProductVersion
Hewlett Packard Enterprise (HPE) ArubaOS (AOS) 10.8.0.0
Hewlett Packard Enterprise (HPE) ArubaOS (AOS) 10.7.0.0
Hewlett Packard Enterprise (HPE) ArubaOS (AOS) 10.4.0.0

References & Advisories (1)

Bug Bounty Relevance

52 / 100
✓ No authentication
✓ No user interaction

CVSS Score

8.3 / 10.0 v3.1
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS — Exploitation Probability

0.77%
Raw Score 0.007730
Percentile 55.7%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00773
2026-10-31
0.00773
2026-10-30
0.00674
2026-10-29
0.00674
2026-10-28
0.00674

Intelligence Sources

mitre ref →
nvd ref →

External Links