- Description
- Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
- Source
- security-alert@hpe.com
- NVD status
- Received
CVSS 3.1
- Type
- Secondary
- Base score
- 10
- Impact score
- 6
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- Severity
- CRITICAL
- Hype score
- Not currently trending
HPE disclosed 72 vulnerabilities in AOS-10 and AOS-8 wireless OS, 33 rated Critical with eight scoring CVSS 10.0. Buffer overflow CVE-2026-79847 affects AOS-10; AOS-8 contains unauthenticated command and SQL injection flaws (CVE-2026-79846, CVE-2026-79848, CVE-2026-79849)
@WorldCyberNewsX
23 Oct 2026
6 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
HPE fixes 72 HPE Networking AOS vulnerabilities, including PAPI protocol flaws and CVSS 10 bugs CVE-2026-79844, CVE-2026-79845 and CVE-2026-79846. #HPE #Aruba #AOS10 #CVE202679844 #CVE202679845 #CVE202679846 #WiFiSecurity #CyberSecurity https://t.co/AmFXQm5g8G
@Daily_CyberSec
23 Oct 2026
381 Impressions
2 Retweets
2 Likes
0 Bookmarks
0 Replies
0 Quotes