CVE-2026-79883
HIGH
MEDIUM
Priority: 0.02
BB Relevance:
62/100
Published: 2026-10-22
Modified: 2026-10-30
First seen: 2026-10-29
Status: active
Attack Surface
Adjacent
Low Complexity
No Auth
No Interaction
Conf. Impact
CVSS Vector Breakdown
AV:
Adjacent
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
Low
A:
High
Description
A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, and to interrupt the normal operation of the affected service.
Weakness Classification (1)
Affected Software (3)
| Vendor | Product | Version |
|---|---|---|
| Hewlett Packard Enterprise (HPE) | ArubaOS (AOS) | 10.8.0.0 |
| Hewlett Packard Enterprise (HPE) | ArubaOS (AOS) | 10.7.0.0 |
| Hewlett Packard Enterprise (HPE) | ArubaOS (AOS) | 10.4.0.0 |